| 标题 | code-projects Hospital Management System 1.0 SQL Injection |
|---|
| 描述 | In the hostpital/hms/admin/index.php file of Hospital Management System, the username and password parameter is obtained, and the SQL statement is concatenated to the SQL statement without filtering the execution, resulting in SQL injection vulnerabilities and login as administrator |
|---|
| 来源 | ⚠️ https://github.com/Rocky-Bull/myCVE/blob/main/Hospital_Management_System_SQLi.md |
|---|
| 用户 | Hexer. (UID 79448) |
|---|
| 提交 | 2024-12-26 07時02分 (2 年前) |
|---|
| 管理 | 2024-12-26 09時01分 (2 hours later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 289334 [code-projects Hospital Management System 1.0 Login /admin/index.php username/password SQL注入] |
|---|
| 积分 | 17 |
|---|