| 제목 | Best courier management system project in php view_parcel.php V1.0 sql |
|---|
| 설명 | The third line of the view_parcel.php file uses the PHP method to retrieve user input from the GET element. Then, the value of this element is passed to the code without proper cleaning or validation, and ultimately used for database queries. This may lead to SQL injection attacks.
baiyunjian has discovered that due to insufficient protection of the "id" parameter in the "view_parcel.php" file, "Best courier management system project in php" there is a serious security vulnerability in the This vulnerability may be used to inject malicious SQL queries, resulting in unauthorized access and extraction of sensitive information from the database. |
|---|
| 원천 | ⚠️ https://github.com/Hefei-Coffee/cve/issues/9 |
|---|
| 사용자 | baiyunjian (UID 82187) |
|---|
| 제출 | 2025. 03. 04. AM 11:10 (2 연령 ago) |
|---|
| 모더레이션 | 2025. 03. 06. PM 03:25 (2 days later) |
|---|
| 상태 | 중복 |
|---|
| VulDB 항목 | 240883 [SourceCodester Best Courier Management System 1.0 view_parcel.php id SQL 주입] |
|---|
| 포인트들 | 0 |
|---|