| Название | SourceCodester Online Mobile Management Store 1.0 Unauthenticated SQL Injection |
|---|
| Описание | The code in 'view_order.php' directly uses the $_GET['id'] parameter in the SQL query without proper sanitization or validation. An attacker could manipulate the id parameter in the URL to inject malicious SQL code, potentially leading to unauthorized access or data manipulation. |
|---|
| Источник | ⚠️ https://github.com/vanitashtml/CVE-Dumps/blob/main/Unauthenticated%20SQL%20Injection%20-%20Mobile%20Management%20Store.md |
|---|
| Пользователь | rjavenido22 (UID 64261) |
|---|
| Представление | 03.03.2024 05:47 (3 лет назад) |
|---|
| Модерация | 03.03.2024 17:01 (11 hours later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 255586 [SourceCodester Online Mobile Management Store 1.0 view_product.php ИД SQL-инъекция] |
|---|
| Баллы | 18 |
|---|