| Título | PHPGurukul Human Metapneumovirus Testing Management System 1.0 SQL Injection |
|---|
| Descrição | When updating user information, the **mobilenumber** parameter in `profile.php` is vulnerable to SQL injection attacks. This vulnerability stems from insufficient validation of user input for the "mobnumber" parameter, allowing attackers to inject time-based malicious SQL queries. |
|---|
| Fonte | ⚠️ https://github.com/SECWG/cve/issues/7 |
|---|
| Utilizador | WenGui (UID 82184) |
|---|
| Submissão | 06/03/2025 15h35 (há 1 Ano) |
|---|
| Moderação | 16/03/2025 14h19 (10 days later) |
|---|
| Estado | Aceite |
|---|
| Entrada VulDB | 299873 [PHPGurukul Human Metapneumovirus Testing Management System 1.0 /profile.php aid/adminname/mobilenumber/email Injeção SQL] |
|---|
| Pontos | 17 |
|---|