| Title | Online Graduate Tracer System for College of ICT Alumni has SQLInjection vulnerability |
|---|
| Description | Online Graduate Tracer System for College of ICT Alumni has SQLInjection vulnerability
First, goto the admin page and try to login, use username as SQLinjection parma
Look at the code, username has been inserted to the SQL without any handle
Try SQLmap
Time-based payload can be used
Code Link
https://www.sourcecodester.com/php/15904/online-graduate-tracer-system-college-ict-alumni.html |
|---|
| Source | ⚠️ https://github.com/Jlan45/OGTSFCOIA/blob/main/SQLinjection.md |
|---|
| User | J1an (UID 44361) |
|---|
| Submission | 04/06/2023 02:19 (4 years ago) |
|---|
| Moderation | 04/06/2023 14:09 (12 hours later) |
|---|
| Status | Duplicate |
|---|
| VulDB entry | 222696 [SourceCodester Online Graduate Tracer System 1.0 admin/adminlog.php user sql injection] |
|---|
| Points | 0 |
|---|