| 标题 | SOURCECODESTER DOCTOR'S APPOINTMENT SYSTEM login SQL injection |
|---|
| 描述 | A vulnerability classified as severe has been discovered in the SOURCECODESTER DOCTOR'S APPOINTMENT SYSTEM. The vulnerability arises in the login program section of the file login.php. The operation of parameters useremail and userpassword leads to SQL injection, and the limit of SQL queries can be controlled to cause any user to log in to the system, including administrator users. This will pose a serious threat to system security and sensitive data within the system. Even disrupting the normal use of the system! |
|---|
| 来源 | ⚠️ https://github.com/vsdwef/edoc-doctor-appointment-system/blob/master/export.md |
|---|
| 用户 | James_Quite (UID 44494) |
|---|
| 提交 | 2023-04-07 06時54分 (4 年前) |
|---|
| 管理 | 2023-04-07 09時08分 (2 hours later) |
|---|
| 状态 | 重复 |
|---|
| VulDB条目 | 221822 [SourceCodester Doctors Appointment System 1.0 login.php edoc usermail SQL注入] |
|---|
| 积分 | 0 |
|---|