| tiêu đề | PHPGurukul News Portal Project in PHP and MySql 1.0 SQL Injection |
|---|
| Mô tả | The admin login endpoint is vulnerable to SQL Injection in News Portal Project in PHP and MySql in PHPGurukul (https://phpgurukul.com/news-portal-project-in-php-and-mysql/) due to improper handling of user-supplied input in SQL queries. An attacker can inject arbitrary SQL code via the username parameter, allowing direct interaction with the backend database. This vulnerability was successfully exploited using automated tools to enumerate and dump the database contents, including sensitive information. Exploitation of this issue may lead to credential disclosure, authentication bypass, and full compromise of the application and database. |
|---|
| Nguồn | ⚠️ https://github.com/Asim-QAZi/SQLInjection-News-Portal-Project-in-PHP-and-MySql-in-PHPGurukul |
|---|
| Người dùng | moasim (UID 93970) |
|---|
| Đệ trình | 09/01/2026 11:56 (cách đây 9 các tháng) |
|---|
| Kiểm duyệt | 18/01/2026 08:26 (9 days later) |
|---|
| Trạng thái | Bản sao |
|---|
| Mục VulDB | 309415 [PHPGurukul News Portal 4.1 Login /admin/index.php username Tiêm SQL] |
|---|
| điểm | 0 |
|---|