| Название | CodeAstro Real Estate Management System 1.0 SQL Injection |
|---|
| Описание | An SQL injection vulnerability exists in the id parameter of the /aboutedit.php page within the admin panel of the application. This vulnerability allows an attacker to manipulate the SQL query executed by the server by injecting malicious SQL code through the id parameter. |
|---|
| Источник | ⚠️ https://github.com/EmilGallajov/zero-day/blob/main/codeastro_real_estate_ms_sqli.md |
|---|
| Пользователь | egsec (UID 77043) |
|---|
| Представление | 08.11.2024 10:02 (2 лет назад) |
|---|
| Модерация | 10.11.2024 09:31 (2 days later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 283804 [CodeAstro Real Estate Management System до 1.0 About Us Page /aboutedit.php id SQL-инъекция] |
|---|
| Баллы | 17 |
|---|