| Название | Bus Dispatch and Information System in adminid has Sql injection vulnerabilities |
|---|
| Описание | Bus Dispatch and Information System has Sql injection vulnerabilities. The vulnerability is located in the adminid parameter of the view_admin.php file. The attacker can read and write arbitrarily to the database and obtain sensitive data without logging in the background.
Soucode Download: https://code-projects.org/bus-dispatch-and-information-system-in-php-with-source-code/ |
|---|
| Источник | ⚠️ https://gitee.com/zyz0103/system-vul/blob/master/Bus%20Dispatch%20and%20Information%20System%20in%20adminid%20has%20Sql%20injection%20vulnerabilities.pdf |
|---|
| Пользователь | zyz1 (UID 46928) |
|---|
| Представление | 17.05.2023 07:36 (3 лет назад) |
|---|
| Модерация | 17.05.2023 18:58 (11 hours later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 229279 [code-projects Bus Dispatch and Information System 1.0 view_admin.php adminid SQL-инъекция] |
|---|
| Баллы | 20 |
|---|