| 标题 | SourceCodester Guest Management System in PHP with Full Source Code V1.0 Unrestricted Upload |
|---|
| 描述 | Hefei Coffee has discovered that due to insufficient protection of the "pass" parameter in the "img/user page. PHP" file, "Guest Management System in PHP with Full Source Code" there is a serious security vulnerability in the This vulnerability may be used to inject malicious SQL queries, resulting in unauthorized access and extraction of sensitive information from the database.
The include method in the 16th line of the img\user page.php file retrieves user input from the POST element. Then, the value of this element will be passed to the code without proper purification or validation, and ultimately used for database queries in the include method on line 21 of the img\user page.php file. This may lead to SQL injection attacks. |
|---|
| 来源 | ⚠️ https://github.com/Hefei-Coffee/cve/issues/1 |
|---|
| 用户 | Hefei-Coffee (UID 68557) |
|---|
| 提交 | 2024-05-07 19時10分 (2 年前) |
|---|
| 管理 | 2024-05-08 09時07分 (14 hours later) |
|---|
| 状态 | 重复 |
|---|
| VulDB条目 | 206398 [SourceCodester Guest Management System index.php username/pass SQL注入] |
|---|
| 积分 | 0 |
|---|