| Title | code-projects Client Details System V1.0 SQL Injection |
|---|
| Description | A critical SQL Injection vulnerability exists in clientdetails/index.php via the femail POST parameter. The value is embedded unescaped into backend SQL, enabling attackers to alter query logic and inject additional statements. Because input is not sanitized and prepared statements are not used, the endpoint is susceptible to multiple exploitation techniques. |
|---|
| Source | ⚠️ https://github.com/hellonewbie/tutorial/issues/4 |
|---|
| User | newbie666 (UID 91453) |
|---|
| Submission | 10/12/2025 10:36 (1 Year ago) |
|---|
| Moderation | 10/26/2025 06:23 (14 days later) |
|---|
| Status | Duplicate |
|---|
| VulDB entry | 313553 [code-projects Client Details System 1.0 index.php username sql injection] |
|---|
| Points | 0 |
|---|