Submit #417586: code-projects blood-bank-system-in-php v1.0 SQL Injection

in register.php，the $user parameter is not filtered and concatenated into the SQL statement.

• Source: ⚠️ https://github.com/siyuancn-hub/cve/blob/main/sql4-user.md
• User: siyuancn (UID 75728)
• Submission: 10/03/2024 18:04 (2 years ago)
• Moderation: 10/10/2024 09:28 (7 days later)
• Status: Accepted
• VulDB entry: 279948 [code-projects Blood Bank System 1.0 register.php User sql injection]
• Points: 15