| tiêu đề | Project Worlds File Management System unknown SQL Injection via Admin Login Form |
|---|
| Mô tả | ### **Vendor and Product Information:**
- **Vendor:** Project Worlds
- **Product:** **File Management System**
- **Product URL:** **[File Management System](https://www.sourcecodester.com/php/13333/file-management-system-very-complete-using-phpmysqli.html)**
### **Severity: High**
### **Confidence: Confirmed**
### **Description:**
The admin login form of the Complaint Management System application is vulnerable to SQL injection. An attacker can exploit this vulnerability to bypass authentication and gain unauthorized access to the admin panel. |
|---|
| Nguồn | ⚠️ https://toradah.notion.site/SQL-Injection-via-Admin-Login-Form-7372893848cb4bb996ae2c9effb0266a?pvs=25 |
|---|
| Người dùng | torada (UID 61170) |
|---|
| Đệ trình | 23/02/2024 10:45 (cách đây 3 những năm) |
|---|
| Kiểm duyệt | 23/02/2024 11:54 (1 hour later) |
|---|
| Trạng thái | được chấp nhận |
|---|
| Mục VulDB | 254623 [SourceCodester Complete File Management System 1.0 Admin Login Form /admin/ username Tiêm SQL] |
|---|
| điểm | 17 |
|---|