| Название | code-projects Public Chat Room 1.0 SQL Injection |
|---|
| Описание | This vulnerability exists in the "login.php" file, where the "username" parameter submitted by the user is directly concatenated into a SQL query without proper escaping or parameterization. An attacker can craft malicious SQL statements and inject them via POST requests to bypass authentication, retrieve sensitive database information, or manipulate the database. |
|---|
| Источник | ⚠️ https://github.com/BalanceLee/CVE/issues/5 |
|---|
| Пользователь | balancelee (UID 87843) |
|---|
| Представление | 20.07.2025 16:00 (1 Год назад) |
|---|
| Модерация | 21.07.2025 11:25 (19 hours later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 317096 [code-projects Public Chat Room 1.0 /login.php username SQL-инъекция] |
|---|
| Баллы | 19 |
|---|