| 标题 | SourceCodester Simple Book Catalog App v1.0 has SQL injection |
|---|
| 描述 | SQL Injection is a type of security vulnerability that enables attackers to interfere with the queries that an application makes to its database. It occurs when an application includes unsafe user input within a query. The attacker can then manipulate the query, leading to unauthorized data access, data modification, or even data deletion.
Simple Book Catalog App v1.0 has a SQL injection vulnerability, which can be used to delete a table via a control parameter.
|
|---|
| 来源 | ⚠️ https://skypoc.wordpress.com/2023/09/04/sourcecodester-simple-book-catalog-app-v1-0-has-multiple-vulnerabilities/ |
|---|
| 用户 | gikaku (UID 53862) |
|---|
| 提交 | 2023-09-04 02時36分 (3 年前) |
|---|
| 管理 | 2023-09-08 17時37分 (5 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 239257 [SourceCodester Simple Book Catalog App 1.0 delete_book.php delete SQL注入] |
|---|
| 积分 | 20 |
|---|