| 제목 | code-projects Public Chat Room 1.0 SQL Injection |
|---|
| 설명 | This vulnerability exists in the "send_message.php" file, where the id parameter submitted by the user is directly concatenated into a SQL query without proper escaping or parameterization. An attacker can craft malicious SQL statements and inject them via POST requests to bypass authentication, retrieve sensitive database information, or manipulate the database. |
|---|
| 원천 | ⚠️ https://github.com/kbhjt/cve/issues/3 |
|---|
| 사용자 | kbhjt (UID 88144) |
|---|
| 제출 | 2025. 07. 22. AM 09:56 (1 년도 ago) |
|---|
| 모더레이션 | 2025. 07. 25. AM 09:02 (3 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 317578 [code-projects Public Chat Room 1.0 send_message.php 아이디 SQL 주입] |
|---|
| 포인트들 | 19 |
|---|