| tiêu đề | SQL injection vulnerability exists in Hostel searching project |
|---|
| Mô tả | After the environment is built，Go to view-property.php，We can see the parameter property following the url_ ID is controllable。property_ ID is assigned to $property_ The ID variable is then brought into the database for query, and the query result is returned. During this process, the property_ The ID is brought into the database without being filtered, thus creating a SQL injection vulnerability |
|---|
| Nguồn | ⚠️ https://github.com/itzmehedi/Hostel-searching-project-using-PHP-Mysql/issues/1 |
|---|
| Người dùng | ace. (UID 34853) |
|---|
| Đệ trình | 17/11/2022 06:54 (cách đây 4 những năm) |
|---|
| Kiểm duyệt | 17/11/2022 16:07 (9 hours later) |
|---|
| Trạng thái | được chấp nhận |
|---|
| Mục VulDB | 213844 [Hostel Searching Project view-property.php property_id Tiêm SQL] |
|---|
| điểm | 20 |
|---|