提交 #496087: Needyamin Library-Card-System 1.0 SQL Injection
| 标题 | Needyamin Library-Card-System 1.0 SQL Injection |
|---|---|
| 描述 | Title of the Vulnerability: Needyamin | Library-Card-System 1.0 | card.php?id= SQL Injection | Found By Maloy Roy Orko Finder & Exploit Owner: Maloy Roy Orko Vulnerability Class: SQL Injection Product Name: Library-Card-System Vendor: needyamin Vendor Link: https://github.com/needyamin/ Vulnerable Product Link: https://github.com/needyamin/Library-Card-System/ Affected Components: ID Parameters Suggested Description: SQL Injection in "id parameter" in "Library-Card-System By needyamin v 1.0" allows "remote" attacker "to dump database as this isn't protected" via "card.php?id=" Attack Vectors: To exploit vulnerability,he has to input exploits via parameters and then he can dump whole database. Detailed Blog: https://www.websecurityinsights.my.id/2025/02/needyamin-library-card-system-10.html |
| 来源 | ⚠️ https:/ |
| 用户 | MaloyRoyOrko (UID 79572) |
| 提交 | 2025-02-06 16時38分 (1 年前) |
| 管理 | 2025-02-15 16時30分 (9 days later) |
| 状态 | 已接受 |
| VulDB条目 | 295964 [needyamin Library Card System 1.0 card.php 标识符 SQL注入] |
| 积分 | 20 |