| 标题 | Campcodes Online Laundry Management System 1.0 SQL Injection |
|---|
| 描述 | A vulnerability was found in Campcodes Online Laundry Management System, impacting the page /manage_laundry.php. The value of user input (id parameter) is directly concatenated into an SQL query without undergoing any form of filtering or utilizing prepared statements, causing the application vulnerable to SQL injection attack |
|---|
| 来源 | ⚠️ https://github.com/yylmm/CVE/blob/main/Online%20Laundry%20Management%20System/sql_manage_laundry.md |
|---|
| 用户 | yylm (UID 67976) |
|---|
| 提交 | 2024-05-10 16時14分 (2 年前) |
|---|
| 管理 | 2024-05-11 08時18分 (16 hours later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 263892 [Campcodes Online Laundry Management System 1.0 /manage_laundry.php id SQL注入] |
|---|
| 积分 | 19 |
|---|