| 제목 | Computer Parts Sales and Inventory System has Sql vulnerabilities |
|---|
| 설명 | SQL Injection vulnerability exists in the user parameter of processlogin file of computer parts sales and inventory system. It is a security vulnerability occurring in the database layer of Web program, and it is the most simple vulnerability existing in the website. The main reason is that the program does not judge and process the validity of user input data, so that the attacker can add additional SQL statements to the predefined SQL statements in the Web application, and realize illegal operations without the knowledge of the administrator, so as to deceive the database server to execute unauthorized arbitrary queries. Thus further access to data information. In short, SQL injection is the insertion of SQL statements into user input strings. If unchecked in poorly designed programs, these injected SQL statements can be mistaken for normal SQL statements by the database server and run, allowing an attacker to execute unplanned commands or access unauthorized data.
Source Download:https://www.sourcecodester.com/php/14382/computer-parts-sales-and-inventory-system-using-phpmysql.html |
|---|
| 원천 | ⚠️ https://github.com/WhiteA1so/Cvetest/blob/main/Sql1.pdf |
|---|
| 사용자 | xiaohua_ruilong (UID 41992) |
|---|
| 제출 | 2023. 03. 01. PM 01:47 (4 연령 ago) |
|---|
| 모더레이션 | 2023. 03. 01. PM 08:34 (7 hours later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 222105 [SourceCodester Computer Parts Sales and Inventory System 1.0 processlogin 사용자 SQL 주입] |
|---|
| 포인트들 | 20 |
|---|