| 标题 | code-projects Public Chat Room 1.0 SQL Injection |
|---|
| 描述 | This vulnerability exists in the "login.php" file, where the "username" parameter submitted by the user is directly concatenated into a SQL query without proper escaping or parameterization. An attacker can craft malicious SQL statements and inject them via POST requests to bypass authentication, retrieve sensitive database information, or manipulate the database. |
|---|
| 来源 | ⚠️ https://github.com/BalanceLee/CVE/issues/5 |
|---|
| 用户 | balancelee (UID 87843) |
|---|
| 提交 | 2025-07-20 16時00分 (11 月前) |
|---|
| 管理 | 2025-07-21 11時25分 (19 hours later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 317096 [code-projects Public Chat Room 1.0 /login.php 用户名 SQL注入] |
|---|
| 积分 | 19 |
|---|