| 标题 | SourceCodester Best House Rental Management System 1.0 SQL Injection |
|---|
| 描述 | After receiving the id parameter passed in through the get method in the manage_tenant.php file, it is directly spliced into the SQL query statement for execution without any security filtering. An attacker can use this parameter to perform SQL injection to read arbitrary database information. |
|---|
| 来源 | ⚠️ https://github.com/rockersiyuan/CVE/blob/main/SourceCodester_House_Rental_Management_System_Sql_Inject-2.md |
|---|
| 用户 | rocker (UID 62454) |
|---|
| 提交 | 2024-05-23 16時06分 (2 年前) |
|---|
| 管理 | 2024-05-25 08時11分 (2 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 266276 [SourceCodester Best House Rental Management System 直到 1.0 manage_tenant.php id SQL注入] |
|---|
| 积分 | 18 |
|---|