| 제목 | sourcecodester Survey Application System 1.0 SQL Injection |
|---|
| 설명 | view_survey.php directly interpolates $_GET['id'] into an SQL statement without validation or prepared statements. An attacker controlling the id parameter can inject SQL that does not return visible differences but creates measurable delays on the database server. This enables time-based blind SQL injection. The vulnerability is exploitable remotely and without authentication. |
|---|
| 원천 | ⚠️ https://github.com/lakshayyverma/CVE-Discovery/blob/main/Survey%20Application%20System%202%20.md |
|---|
| 사용자 | lakshay12311 (UID 91298) |
|---|
| 제출 | 2025. 10. 26. AM 10:48 (12 개월 ago) |
|---|
| 모더레이션 | 2025. 11. 12. PM 01:43 (17 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 332187 [SourceCodester Survey Application System 1.0 /view_survey.php id SQL 주입] |
|---|
| 포인트들 | 20 |
|---|