| tiêu đề | Electronic Medical Records System-register.php-Sqlinjection |
|---|
| Mô tả | Electronic Medical Records System-register.php-Sqlinjection
There is a receiving pconsultation parameter in the Register file, and it is directly entered into the UPDATE statement without any filtering. Therefore, it can be used by attackers to steal sensitive data.
Detailed instructions：https://github.com/Hanfu-l/Cve-vulnerability-mining/blob/main/Electronic%20Medical%20Records%20System/Electronic%20Medical%20Records%20System-register.php-Sqlinjection.pdf |
|---|
| Nguồn | ⚠️ https://github.com/Hanfu-l/Cve-vulnerability-mining/blob/main/Electronic%20Medical%20Records%20System/Electronic%20Medical%20Records%20System-register.php-Sqlinjection.pdf |
|---|
| Người dùng | Hanfu (UID 30648) |
|---|
| Đệ trình | 06/08/2022 12:23 (cách đây 4 những năm) |
|---|
| Kiểm duyệt | 06/08/2022 18:55 (7 hours later) |
|---|
| Trạng thái | được chấp nhận |
|---|
| Mục VulDB | 205816 [SourceCodester Electronic Medical Records System UPDATE Statement register.php pconsultation Tiêm SQL] |
|---|
| điểm | 20 |
|---|