| tiêu đề | https://www.sourcecodester.com/ Internship Portal Management System 1.0 SQL Injection |
|---|
| Mô tả | A critical vulnerability has been discovered in the Internship Portal Management System. This affects the admin/edit_admin_query.php file. Operations on the parameter username/password/name/admin_id result in sql injection. The main reason is that the program does not judge and process the legitimacy of the user input data, resulting in attackers can add additional SQL statements to the predefined SQL statements in the Web application, and achieve illegal operations without the knowledge of the administrator, so as to deceive the database server to carry out unauthorized arbitrary queries. To further obtain data information. |
|---|
| Nguồn | ⚠️ https://github.com/thisissuperann/Vul/blob/main/Internship-Portal-Management-System-05 |
|---|
| Người dùng | liuann (UID 67227) |
|---|
| Đệ trình | 03/04/2024 03:34 (cách đây 3 những năm) |
|---|
| Kiểm duyệt | 03/04/2024 07:17 (4 hours later) |
|---|
| Trạng thái | được chấp nhận |
|---|
| Mục VulDB | 259104 [SourceCodester Internship Portal Management System 1.0 edit_admin_query.php username/password/name/admin_id Tiêm SQL] |
|---|
| điểm | 20 |
|---|