| 标题 | code-projects Project Monitoring System 1.0 SQL Injection |
|---|
| 描述 | SQL injection is not just a theoretical risk—it is one of the most destructive and reliably exploitable vulnerabilities in modern web applications. Below is a detailed, attack-by-attack description of what an adversary can actually do once he can inject arbitrary SQL into your back-end database. Every item is mapped to real-world impact, not abstract “loss of confidentiality.”
In the login.php file of Responsive Blog Site, the username and password parameters are obtained, and the SQL statement is concatenated to the SQL statement without filtering the execution, resulting in SQL injection vulnerabilities and server permissions |
|---|
| 来源 | ⚠️ https://github.com/asd1238525/cve/blob/main/SQL5.md |
|---|
| 用户 | yuwangxian (UID 90378) |
|---|
| 提交 | 2025-09-22 18時44分 (1 年前) |
|---|
| 管理 | 2025-09-26 14時50分 (4 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 326114 [code-projects Project Monitoring System 1.0 /login.php username/password SQL注入] |
|---|
| 积分 | 20 |
|---|