| tiêu đề | BP Monitoring Management System v1.0 Background Modification of Personal Information SQL Injection |
|---|
| Mô tả | A vulnerability classified as severe has been discovered in the BP Monitoring Management System. The vulnerability lies in the modification of username and phone number in the profile.php file. The operation of parameters fullname and mobilenumber leads to SQL injection and can control the limitations of SQL queries, resulting in malicious tampering of any user's phone number and username, and database information leakage. This will pose a serious threat to system security and sensitive data within the system. Even disrupted the normal use of the system! |
|---|
| Nguồn | ⚠️ https://github.com/vsdwef/BP-Monitoring-Management-System/blob/main/report_English.pdf |
|---|
| Người dùng | James_Quite (UID 44494) |
|---|
| Đệ trình | 07/04/2023 11:02 (cách đây 4 những năm) |
|---|
| Kiểm duyệt | 07/04/2023 18:38 (8 hours later) |
|---|
| Trạng thái | được chấp nhận |
|---|
| Mục VulDB | 225318 [PHPGurukul BP Monitoring Management System 1.0 User Profile Update profile.php name/mobno Tiêm SQL] |
|---|
| điểm | 20 |
|---|