| tiêu đề | Code-projects Chat System 1.0 Improper Access Controls |
|---|
| Mô tả | Chat System allows attackers to perform unauthorized actions through this interface. Due to the lack of session authentication and other security measures, attackers can execute SQL injection and arbitrary room deletion.
(Parameter key-value: id=4' or sleep(5)#&del=1) (SQL injection)
(Parameter key-value: id={value}&del=1) (`value` represents the `id`, allowing unauthorized enumeration and deletion) |
|---|
| Nguồn | ⚠️ https://github.com/Sinon2003/cve/blob/main/chatsystem/unauthorized.md |
|---|
| Người dùng | Rorochan (UID 79656) |
|---|
| Đệ trình | 01/01/2025 12:00 (cách đây 2 những năm) |
|---|
| Kiểm duyệt | 02/01/2025 09:32 (22 hours later) |
|---|
| Trạng thái | Bản sao |
|---|
| Mục VulDB | 289939 [code-projects Chat System 1.0 /admin/deleteroom.php ID Tiêm SQL] |
|---|
| điểm | 0 |
|---|