| 标题 | code-projects Simple Leave Manager 1.0 SQL Injection |
|---|
| 描述 | In the user.php file of Simple Leave Manager, theuser table parameter is obtained, and the SQL statement is concatenated to the SQL statement without filtering the execution, resulting in SQL injection vulnerabilities and server permissions |
|---|
| 来源 | ⚠️ https://github.com/asd1238525/cve/blob/main/SQL8.md |
|---|
| 用户 | 86xx (UID 91400) |
|---|
| 提交 | 2025-10-08 10時55分 (12 月前) |
|---|
| 管理 | 2025-10-09 14時10分 (1 day later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 327716 [code-projects Simple Leave Manager 1.0 /user.php table SQL注入] |
|---|
| 积分 | 17 |
|---|