| 标题 | code-projects Simple Online Hotel Reservation System 2.0 SQL Injection |
|---|
| 描述 | In the add_account.php file of Simple Online Hotel Reservation System, theuser name parameter is obtained, and the SQL statement is concatenated to the SQL statement without filtering the execution, resulting in SQL injection vulnerabilities and server permissions |
|---|
| 来源 | ⚠️ https://github.com/asd1238525/cve/blob/main/SQL10.md |
|---|
| 用户 | yunlin (UID 79129) |
|---|
| 提交 | 2025-10-17 12時33分 (12 月前) |
|---|
| 管理 | 2025-11-01 16時58分 (15 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 330889 [code-projects Simple Online Hotel Reservation System 2.0 /admin/add_account.php name SQL注入] |
|---|
| 积分 | 18 |
|---|