| Название | phpgurukul.com Curfew e-Pass Management System 1.0 sql |
|---|
| Описание | A SQL injection vulnerability was discovered in the "/admin/search-pass.php" file of the "Curfew Electronic Pass Management System" project. The cause of this issue was that the attacker injected malicious code from the "searchdata" POST parameter and directly used it in the SQL query without any necessary cleaning or validation. This allowed the attacker to forge input values, thereby modifying the SQL query and performing unauthorized operations. |
|---|
| Источник | ⚠️ https://github.com/cowhrk/CVE/issues/1 |
|---|
| Пользователь | chenfei13124 (UID 98107) |
|---|
| Представление | 13.05.2026 09:24 (5 месяцы назад) |
|---|
| Модерация | 31.05.2026 20:16 (18 days later) |
|---|
| Статус | Дубликат |
|---|
| Запись VulDB | 299880 [PHPGurukul Curfew e-Pass Management System 1.0 /admin/search-pass.php searchdata SQL-инъекция] |
|---|
| Баллы | 0 |
|---|