| 标题 | SourceCodester Best house rental management system V1.0 SQL Injection |
|---|
| 描述 | SQL injection vulnerabilities were found in the "(admin_class. php)" file of the "(Best House Lease Management System)" project. The reason for this problem is that the attacker injected malicious code from the parameter "($username)" in the save_user() function of the (admin_class. php) file; The program will input the username of the user and use it directly in the SQL query without proper cleaning or verification. This allows attackers to forge input values to operate SQL queries and perform unauthorized operations. |
|---|
| 来源 | ⚠️ https://github.com/WxxAbo/CVE/issues/1 |
|---|
| 用户 | Abowxx (UID 97595) |
|---|
| 提交 | 2026-04-25 09時42分 (5 月前) |
|---|
| 管理 | 2026-05-23 11時20分 (28 days later) |
|---|
| 状态 | 重复 |
|---|
| VulDB条目 | 277218 [SourceCodester Best House Rental Management System 1.0 /admin_class.php delete_user/save_user id SQL注入] |
|---|
| 积分 | 0 |
|---|