| Название | Code-projects Chat System 1.0 SQL Injection |
|---|
| Описание | Because the id parameter is not sanitized or parameterized, an attacker can inject malicious SQL code to manipulate the database query. By leveraging time-based SQL injection techniques, an attacker can induce deliberate delays in the database response using functions like SLEEP(). This can be used to confirm the presence of the vulnerability and potentially extract sensitive information from the database. |
|---|
| Источник | ⚠️ https://github.com/Sinon2003/cve/blob/main/chatsystem/sql_inject2.md |
|---|
| Пользователь | Rorochan (UID 79656) |
|---|
| Представление | 01.01.2025 11:31 (2 лет назад) |
|---|
| Модерация | 02.01.2025 09:32 (22 hours later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 289939 [code-projects Chat System 1.0 /admin/deleteroom.php ИД SQL-инъекция] |
|---|
| Баллы | 20 |
|---|