| Title | code-projects Client Details System V1.0 SQL Injection |
|---|
| Description | A critical SQL Injection vulnerability was identified in the user authentication functionality of the `/index.php` page. The `uemail` parameter is vulnerable to injection, allowing an attacker to alter the logic of the backend SQL query responsible for validating user credentials. Because the input is not properly sanitized or handled using prepared statements, a malicious payload can be submitted to bypass the password check. This represents a critical risk to the confidentiality and integrity of the application's data. |
|---|
| Source | ⚠️ https://github.com/hellonewbie/tutorial/issues/1#issuecomment-3385387735 |
|---|
| User | newbie666 (UID 91453) |
|---|
| Submission | 10/09/2025 18:44 (1 Year ago) |
|---|
| Moderation | 10/10/2025 15:10 (20 hours later) |
|---|
| Status | Duplicate |
|---|
| VulDB entry | 313553 [code-projects Client Details System 1.0 index.php username sql injection] |
|---|
| Points | 0 |
|---|