| Название | code-projects Online Product Reservation system V1.0 SQL Injection |
|---|
| Описание | A critical SQL injection vulnerability exists in the user login functionality. The application directly concatenates user input into SQL query without validation, allowing attackers to bypass authentication completely and extract sensitive user data. |
|---|
| Источник | ⚠️ https://github.com/foeCat/CVE/blob/main/OnlineProductReservation_PHP/sqli_login.php.md |
|---|
| Пользователь | Ho Cherry (UID 94105) |
|---|
| Представление | 03.01.2026 12:16 (9 месяцы назад) |
|---|
| Модерация | 04.01.2026 08:01 (20 hours later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 339475 [code-projects Online Product Reservation System 1.0 User Login app/user/login.php emailadd SQL-инъекция] |
|---|
| Баллы | 16 |
|---|