Gửi #515429: PHPGurukul Human Metapneumovirus Testing Management System 1.0 SQL Injectionthông tin

tiêu đềPHPGurukul Human Metapneumovirus Testing Management System 1.0 SQL Injection
Mô tảWhen updating user information, the **mobilenumber** parameter in `profile.php` is vulnerable to SQL injection attacks. This vulnerability stems from insufficient validation of user input for the "mobnumber" parameter, allowing attackers to inject time-based malicious SQL queries.
Nguồn⚠️ https://github.com/SECWG/cve/issues/7
Người dùng
 WenGui (UID 82184)
Đệ trình06/03/2025 15:35 (cách đây 1 Năm)
Kiểm duyệt16/03/2025 14:19 (10 days later)
Trạng tháiđược chấp nhận
Mục VulDB299873 [PHPGurukul Human Metapneumovirus Testing Management System 1.0 /profile.php aid/adminname/mobilenumber/email Tiêm SQL]
điểm17

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!