| Título | SourceCodester Guest Management System in PHP with Full Source Code V1.0 Unrestricted Upload |
|---|
| Descrição | Hefei Coffee has discovered that due to insufficient protection of the "pass" parameter in the "img/user page. PHP" file, "Guest Management System in PHP with Full Source Code" there is a serious security vulnerability in the This vulnerability may be used to inject malicious SQL queries, resulting in unauthorized access and extraction of sensitive information from the database.
The include method in the 16th line of the img\user page.php file retrieves user input from the POST element. Then, the value of this element will be passed to the code without proper purification or validation, and ultimately used for database queries in the include method on line 21 of the img\user page.php file. This may lead to SQL injection attacks. |
|---|
| Fonte | ⚠️ https://github.com/Hefei-Coffee/cve/issues/1 |
|---|
| Utilizador | Hefei-Coffee (UID 68557) |
|---|
| Submissão | 07/05/2024 19h10 (há 2 anos) |
|---|
| Moderação | 08/05/2024 09h07 (14 hours later) |
|---|
| Estado | Duplicado |
|---|
| Entrada VulDB | 206398 [SourceCodester Guest Management System index.php username/pass Injeção SQL] |
|---|
| Pontos | 0 |
|---|