| 标题 | SOURCECODESTER house rental management system 1.0 sql injection |
|---|
| 描述 | Multiple SQL injection affecting house rental management system. vulnerabilities can be exploited by an attacker to perform SQL injection attacks and execute Remote Code Execution on the server.
By manipulating the parameters "id", "name" and "username" an attacker can inject malicious SQL queries into the backend database. This could potentially lead to unauthorized access to sensitive information, modification of database records, and in some cases, the execution of remote code on the server. |
|---|
| 来源 | ⚠️ https://drive.google.com/file/d/1DGb371-evTgstf42t3u2dOM4KBEt5mPw/view?usp=sharing |
|---|
| 用户 | Strik3r (UID 61057) |
|---|
| 提交 | 2024-01-11 14時40分 (3 年前) |
|---|
| 管理 | 2024-01-12 13時49分 (23 hours later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 250610 [SourceCodester House Rental Management System 1.0 Edit User manage_user.php id/name/username SQL注入] |
|---|
| 积分 | 20 |
|---|