| tiêu đề | Phpgurukul Zoo Management System V2.1 SQL Injection |
|---|
| Mô tả | During the security assessment of the RTBS Project PH, a critical SQL injection vulnerability was found in the /aboutus.php file. This flaw arises from insufficient validation of the pagetitle parameter, which allows attackers to inject arbitrary SQL commands. As a result, malicious users can compromise the database, potentially exposing confidential data, modifying information, or even deleting critical records. Immediate action is needed to mitigate this vulnerability and ensure the security and integrity of the system. |
|---|
| Nguồn | ⚠️ https://github.com/81a2in9/cve/issues/1 |
|---|
| Người dùng | B1a2ing (UID 83492) |
|---|
| Đệ trình | 30/03/2025 13:21 (cách đây 2 những năm) |
|---|
| Kiểm duyệt | 03/04/2025 17:48 (4 days later) |
|---|
| Trạng thái | được chấp nhận |
|---|
| Mục VulDB | 303245 [PHPGurukul Zoo Management System 2.1 /aboutus.php pagetitle/pagedes Tiêm SQL] |
|---|
| điểm | 20 |
|---|