| Title | code-projects Client Details System V1.0 SQL Injection |
|---|
| Description | A critical SQL Injection exists in clientdetails/admin/manage-users.php via the id GET parameter. The application concatenates id into backend SQL, allowing attackers to modify query logic and inject additional operators or statements. Because input is not sanitized and prepared statements are not used, multiple exploitation techniques are possible. |
|---|
| Source | ⚠️ https://github.com/hellonewbie/tutorial/issues/5 |
|---|
| User | newbie666 (UID 91453) |
|---|
| Submission | 10/12/2025 10:52 (1 Year ago) |
|---|
| Moderation | 10/26/2025 05:59 (14 days later) |
|---|
| Status | Duplicate |
|---|
| VulDB entry | 249143 [code-projects Client Details System 1.0 /admin/manage-users.php id sql injection] |
|---|
| Points | 0 |
|---|