| Название | Human Resource Management System detailview.php has Sqlinjection |
|---|
| Описание | A SQL injection vulnerability exists in the Human Resource Management System detailview.php. The basic introduction of the vulnerability is that SQL injection means that the web application does not strictly judge or filter the validity of user input data. An attacker can add additional SQL statements to the end of a predefined query statement in a web application, and perform illegal operations without the knowledge of the administrator. In this way, the database server can be tricked into performing any unauthorized query and obtaining the corresponding data information.
Source Down:https://www.sourcecodester.com/sites/default/files/download/oretnom23/hrm.zip |
|---|
| Источник | ⚠️ https://github.com/mohdkey/Human-Resource-Management-System/blob/main/Human%20Resource%20Management%20System%20detailview.php%20has%20Sqlinjection.pdf |
|---|
| Пользователь | XCES (UID 49354) |
|---|
| Представление | 23.06.2023 16:21 (3 лет назад) |
|---|
| Модерация | 23.06.2023 17:28 (1 hour later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 232288 [SourceCodester Human Resource Management System 1.0 detailview.php employeeid SQL-инъекция] |
|---|
| Баллы | 20 |
|---|