| 标题 | SourceCodester Food Ordering Management System 1.0 SQL Injection |
|---|
| 描述 | SQL Injection vulnerability was discovered from Sourcecodester Food Ordering Management System 1.0.
add-users.php has a vulnerable parameter 'contact', which allows time-based blind sql injection. Either through crafted payload or premade tool such as sqlmap, this vulnerability can be recreated easily. This SQL injection leads to completely data breach for all the database on the system. |
|---|
| 来源 | ⚠️ https://github.com/jadu101/CVE/blob/main/SourceCodester_Food_Ordering_Management_System_add_users_Sqli.md |
|---|
| 用户 | jadu101 (UID 70632) |
|---|
| 提交 | 2024-06-19 09時26分 (2 年前) |
|---|
| 管理 | 2024-06-20 19時31分 (1 day later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 269280 [SourceCodester Food Ordering Management System 1.0 add-users.php contact SQL注入] |
|---|
| 积分 | 19 |
|---|