| 标题 | Sourcecodester Laundry Management System v1.0 SQL Injection |
|---|
| 描述 | Laundry Management System SQL Injection on (/application/controller/Pengeluaran.php) .The potential injection point is located within the `laporan_filter` function in `Pengeluaran.php`. This function directly utilizes the `$dari` and `$sampai` variables to construct a database query without employing parameterized queries or proper data sanitization measures. |
|---|
| 来源 | ⚠️ https://github.com/fubxx/CVE/blob/main/LaundryManagementSystemSQL4.md |
|---|
| 用户 | LI YU (UID 67398) |
|---|
| 提交 | 2024-04-08 09時34分 (2 年前) |
|---|
| 管理 | 2024-04-08 14時33分 (5 hours later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 259747 [SourceCodester Laundry Management System 1.0 Pengeluaran.php laporan_filter dari/sampai SQL注入] |
|---|
| 积分 | 19 |
|---|