| tiêu đề | code-projects Chat System Using PHP With Source Code 1.0 SQL Injection |
|---|
| Mô tả | The user parameter in /user/add_chatroom.php is not properly sanitized or parameterized, which leaves it vulnerable to SQL injection attacks. Attackers can exploit this by injecting malicious SQL code to manipulate the database queries. Utilizing time-based SQL injection methods, they can introduce intentional delays in the database response through functions such as SLEEP(). This technique can be employed to verify the existence of the vulnerability and may also be used to extract sensitive information from the database. |
|---|
| Nguồn | ⚠️ https://github.com/Team-intN18-SoybeanSeclab/CVE/blob/main/sqlinject1.md |
|---|
| Người dùng | HDSEC (UID 81035) |
|---|
| Đệ trình | 31/01/2025 15:19 (cách đây 2 những năm) |
|---|
| Kiểm duyệt | 01/02/2025 19:52 (1 day later) |
|---|
| Trạng thái | được chấp nhận |
|---|
| Mục VulDB | 294359 [code-projects Chat System 1.0 /user/add_chatroom.php chatname/chatpass Tiêm SQL] |
|---|
| điểm | 20 |
|---|