| 제목 | code-projects POS(point of sales) and Inventory System 1.0 SQL Injection |
|---|
| 설명 | A malicious attacker can exploit this vulnerability by manipulating the id/pty parameter. By injecting malicious SQL code into the parameter, the attacker could gain unauthorized access to sensitive information stored in the server's database. This could lead to the exposure of confidential data, including but not limited to user credentials, personal information, and other critical data. |
|---|
| 원천 | ⚠️ https://gist.github.com/Masamuneee/9c539b89dad40033a5037b744e394ae0 |
|---|
| 사용자 | masamune (UID 79684) |
|---|
| 제출 | 2025. 01. 02. AM 09:56 (1 년도 ago) |
|---|
| 모더레이션 | 2025. 01. 02. PM 07:07 (9 hours later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 290105 [code-projects Point of Sales and Inventory Management System 1.0 /user/add_cart.php id/qty SQL 주입] |
|---|
| 포인트들 | 19 |
|---|