| 제목 | code-projects Shopping Portal Using PHP With Source Code 1.0 SQL Injection |
|---|
| 설명 | In the /Shopping/Admin/index.php file of Shopping Portal System, the username and password parameter is obtained, and the SQL statement is concatenated to the SQL statement without filtering the execution, resulting in SQL injection vulnerabilities and login as administrator |
|---|
| 원천 | ⚠️ https://hexotion.notion.site/Shopping-Portal-in-PHP-has-Stored-SQL-injection-vulnerability-in-admin-index-php-1a7bb766cf3280e8bb81eaa59c4c2b74 |
|---|
| 사용자 | Hexer. (UID 79448) |
|---|
| 제출 | 2025. 02. 27. AM 08:53 (2 연령 ago) |
|---|
| 모더레이션 | 2025. 03. 04. PM 05:12 (5 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 298557 [code-projects Shopping Portal 1.0 Login index.php password SQL 주입] |
|---|
| 포인트들 | 14 |
|---|