| 标题 | https://www.sourcecodester.com/users/tips23 Web PHP 1 SQL Injection |
|---|
| 描述 | Exploit Title: Simple Online Bidding System SQL Injection
Date: 4/08/2023
Exploit Author: y3thu
Vendor Homepage: https://www.sourcecodester.com/users/tips23
Software Link: https://www.sourcecodester.com/php/14558/simple-online-bidding-system-using-phpmysqli-source-code.html
Attack Vector: WEB, Network
Testeted on: Kali Linux
Description: The SQL injection vulnerability in an online bidding system allows attackers to inject malicious SQL code through input fields, compromising the system's database. This enables unauthorized access to sensitive data, manipulation of bids, and potential denial-of-service attacks. Mitigation involves strict input validation, parameterized queries, database access controls, security testing, and user education to prevent exploitation and ensure system integrity. |
|---|
| 来源 | ⚠️ https://github.com/yethu123/vulns-finding/blob/main/Simple%20Online%20Bidding%20System.md |
|---|
| 用户 | y3thu (UID 52000) |
|---|
| 提交 | 2024-02-29 19時01分 (3 年前) |
|---|
| 管理 | 2024-03-01 08時45分 (14 hours later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 255393 [SourceCodester Simple Online Bidding System 1.0 index.php category_id SQL注入] |
|---|
| 积分 | 20 |
|---|