| tiêu đề | GitHub Chemical Inventory Management System 1.0 SQL Injection |
|---|
| Mô tả | The Chemical Inventory Management System v1.0 is vulnerable to a SQL Injection flaw in the inventory_form.php file through the chem_name parameter.
An attacker can manipulate the parameter to inject arbitrary SQL queries, which may lead to unauthorized access to the backend database.
This vulnerability can be exploited to enumerate databases, extract sensitive information, and potentially gain full control over the application’s data. |
|---|
| Nguồn | ⚠️ https://gist.github.com/0xSebin/29cb8e043974d996509522cdb738edc6 |
|---|
| Người dùng | 0xSebin (UID 35195) |
|---|
| Đệ trình | 23/08/2025 18:31 (cách đây 1 Năm) |
|---|
| Kiểm duyệt | 31/08/2025 14:40 (8 days later) |
|---|
| Trạng thái | được chấp nhận |
|---|
| Mục VulDB | 322059 [deepakmisal24 Chemical Inventory Management System đến 1.0 /inventory_form.php chem_name Tiêm SQL] |
|---|
| điểm | 20 |
|---|