| 제목 | code-projects Project Monitoring System 1.0 SQL Injection |
|---|
| 설명 | SQL injection is not just a theoretical risk—it is one of the most destructive and reliably exploitable vulnerabilities in modern web applications. Below is a detailed, attack-by-attack description of what an adversary can actually do once he can inject arbitrary SQL into your back-end database. Every item is mapped to real-world impact, not abstract “loss of confidentiality.”
In the login.php file of Responsive Blog Site, the username and password parameters are obtained, and the SQL statement is concatenated to the SQL statement without filtering the execution, resulting in SQL injection vulnerabilities and server permissions |
|---|
| 원천 | ⚠️ https://github.com/asd1238525/cve/blob/main/SQL5.md |
|---|
| 사용자 | yuwangxian (UID 90378) |
|---|
| 제출 | 2025. 09. 22. PM 06:44 (1 년도 ago) |
|---|
| 모더레이션 | 2025. 09. 26. PM 02:50 (4 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 326114 [code-projects Project Monitoring System 1.0 /login.php username/password SQL 주입] |
|---|
| 포인트들 | 20 |
|---|