提交 #436014: code-projects E-Health Care System IN PHP v1.0 SQL Injection,Code Excute信息

标题code-projects E-Health Care System IN PHP v1.0 SQL Injection,Code Excute
描述There are unrestricted SQL injection attacks in e-health systems. The following parameters can be controlled: email. The function executes the email parameter into a SQL statement without any restrictions. A malicious attacker can exploit this vulnerability to obtain sensitive information in the server database. You can also get server permissions.
来源⚠️ https://github.com/UnrealdDei/cve/blob/main/sql11.md
用户
 UnrealDawn (UID 76912)
提交2024-11-01 20時12分 (2 年前)
管理2024-11-02 19時28分 (23 hours later)
状态已接受
VulDB条目282908 [code-projects E-Health Care System 1.0 /Admin/adminlogin.php email/admin_pswd SQL注入]
积分18

Do you want to use VulDB in your project?

Use the official API to access entries easily!