| Название | SourceCodester Online Hospital Management System Using PHP/MySQL V1.0 SQL Injection |
|---|
| Описание | The fourth line of the departmentDoctor.php file uses the PHP method to retrieve user input from the $_GET element. Then, the value of this element will be passed to the code without proper purification or validation, and ultimately used for database queries in the PHP method on line 5 of the departmentDoctor.php file. This may lead to SQL injection attacks
ZhaoBin Huang has discovered that due to insufficient protection of the "deptid" parameter in the "\departmentDoctor.php" file, "Best courier management system project in php" there is a serious security vulnerability in the This vulnerability may be used to inject malicious SQL queries, resulting in unauthorized access and extraction of sensitive information from the database.database. |
|---|
| Источник | ⚠️ https://github.com/CveSecLook/cve/issues/41 |
|---|
| Пользователь | ZhaoBin Huang (UID 69070) |
|---|
| Представление | 23.05.2024 14:10 (2 лет назад) |
|---|
| Модерация | 25.05.2024 08:08 (2 days later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 266274 [SourceCodester Online Hospital Management System 1.0 departmentDoctor.php deptid SQL-инъекция] |
|---|
| Баллы | 20 |
|---|