| Название | code-projects Online Lot Reservation System 1.0 SQL Injection |
|---|
| Описание | An SQL injection vulnerability was found in the loginuser.php file. Attackers can inject malicious SQL code through the email and password parameters. The system directly concatenates user input to the SQL query statement for execution without using prepared statements or input filtering, which enables attackers to bypass authentication. |
|---|
| Источник | ⚠️ https://github.com/zzk6th/cve/issues/1 |
|---|
| Пользователь | z0ng (UID 96775) |
|---|
| Представление | 09.04.2026 13:50 (4 месяцы назад) |
|---|
| Модерация | 26.04.2026 21:18 (17 days later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 359730 [code-projects Online Lot Reservation System до 1.0 /loginuser.php email/password SQL-инъекция] |
|---|
| Баллы | 19 |
|---|