| tiêu đề | SQL Injection in Delete tasks in Task Reminder System 1.0 |
|---|
| Mô tả | It was possible to locate at least one point vulnerable to sql injection, more specifically in the "Master.php" file, so that an attacker Administrator or Staff of the application can carry out the exploitation.
PoC Video: https://youtu.be/o46oHLvY2-E
References:
https://portswigger.net/web-security/sql-injection#:~:text=SQL%20injection%20(SQLi)%20is%20a,not%20normally%20able%20to%20retrieve.
https://owasp.org/www-community/attacks/SQL_Injection |
|---|
| Nguồn | ⚠️ https://www.sourcecodester.com/php/16451/task-reminder-system-php-and-mysql-source-code-free-download.html |
|---|
| Người dùng | Anonymous User |
|---|
| Đệ trình | 18/04/2023 04:49 (cách đây 3 những năm) |
|---|
| Kiểm duyệt | 18/04/2023 12:50 (8 hours later) |
|---|
| Trạng thái | được chấp nhận |
|---|
| Mục VulDB | 226271 [SourceCodester Task Reminder System 1.0 Master.php ID Tiêm SQL] |
|---|
| điểm | 20 |
|---|