| 제목 | code-projects LifeStyle Store 1.0 SQL Injection |
|---|
| 설명 | This vulnerability exists in the /cart_add.php file, where user-submitted id parameters are directly concatenated into a SQL query without proper escaping or parameterization. An attacker could craft malicious SQL statements and inject them via GET requests to bypass authentication, retrieve sensitive database information, or manipulate the database. |
|---|
| 원천 | ⚠️ https://github.com/lazywack/cve/issues/2 |
|---|
| 사용자 | XenoEcho (UID 87913) |
|---|
| 제출 | 2025. 07. 29. AM 08:18 (1 년도 ago) |
|---|
| 모더레이션 | 2025. 07. 30. AM 10:36 (1 day later) |
|---|
| 상태 | 중복 |
|---|
| VulDB 항목 | 315160 [code-projects LifeStyle Store 1.0 /cart_add.php id SQL 주입] |
|---|
| 포인트들 | 0 |
|---|