| 제목 | code-projects Online Lot Reservation System 1.0 SQL Injection |
|---|
| 설명 | An SQL injection vulnerability was found in the loginuser.php file. Attackers can inject malicious SQL code through the email and password parameters. The system directly concatenates user input to the SQL query statement for execution without using prepared statements or input filtering, which enables attackers to bypass authentication. |
|---|
| 원천 | ⚠️ https://github.com/zzk6th/cve/issues/1 |
|---|
| 사용자 | z0ng (UID 96775) |
|---|
| 제출 | 2026. 04. 09. PM 01:50 (4 개월 ago) |
|---|
| 모더레이션 | 2026. 04. 26. PM 09:18 (17 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 359730 [code-projects Online Lot Reservation System 까지 1.0 /loginuser.php email/password SQL 주입] |
|---|
| 포인트들 | 19 |
|---|