| Название | itsourcecode Alton Management System 1.0 SQLi team_save.php |
|---|
| Описание | After logging in as a backend user, request the "/admin/team_save.php" page and pass in the "team" parameter. Due to the lax filtering of the "team" parameter on this page, SQL injection vulnerabilities were created. |
|---|
| Источник | ⚠️ https://github.com/DeepMountains/Mirage/blob/main/CVE8-6.md |
|---|
| Пользователь | Dee.Mirage (UID 71702) |
|---|
| Представление | 27.07.2024 12:35 (2 лет назад) |
|---|
| Модерация | 30.07.2024 15:29 (3 days later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 273147 [itsourcecode Alton Management System 1.0 /admin/team_save.php team SQL-инъекция] |
|---|
| Баллы | 17 |
|---|