| Название | code-projects POS(point of sales) and Inventory System 1.0 SQL Injection |
|---|
| Описание | A malicious attacker can exploit this vulnerability by manipulating the name parameter. By injecting malicious SQL code into the parameter, the attacker could gain unauthorized access to sensitive information stored in the server's database. This could lead to the exposure of confidential data, including but not limited to user credentials, personal information, and other critical data. |
|---|
| Источник | ⚠️ https://gist.github.com/Masamuneee/07a787e5a4599954c178baf90eeb553c |
|---|
| Пользователь | masamune (UID 79684) |
|---|
| Представление | 02.01.2025 10:29 (2 лет назад) |
|---|
| Модерация | 03.01.2025 11:46 (1 day later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 290134 [code-projects Point of Sales and Inventory Management System 1.0 /user/search.php name SQL-инъекция] |
|---|
| Баллы | 19 |
|---|