| tiêu đề | Author:Fabian Ros Online Reviewer System V1.0 SQL Injection |
|---|
| Mô tả | A SQL injection vulnerability was identified in Online Reviewer System version 1.0. The issue exists in the file /reviewer/login/index.php and affects the POST parameter "username".
The application fails to properly sanitize user-supplied input before incorporating it into SQL queries. This allows remote attackers to manipulate SQL statements without authentication.
An attacker can exploit this vulnerability to perform unauthorized database operations, potentially leading to information disclosure or data manipulation. |
|---|
| Nguồn | ⚠️ https://github.com/GCXWLP/cve/issues/1 |
|---|
| Người dùng | Kwansh_RL (UID 95796) |
|---|
| Đệ trình | 22/02/2026 17:59 (cách đây 7 các tháng) |
|---|
| Kiểm duyệt | 07/03/2026 09:39 (13 days later) |
|---|
| Trạng thái | Bản sao |
|---|
| Mục VulDB | 344868 [code-projects Online Reviewer System 1.0 Login /login/index.php username/password Tiêm SQL] |
|---|
| điểm | 0 |
|---|