| 标题 | phpgurukul.com Curfew e-Pass Management System 1.0 sql |
|---|
| 描述 | A SQL injection vulnerability was discovered in the "/admin/search-pass.php" file of the "Curfew Electronic Pass Management System" project. The cause of this issue was that the attacker injected malicious code from the "searchdata" POST parameter and directly used it in the SQL query without any necessary cleaning or validation. This allowed the attacker to forge input values, thereby modifying the SQL query and performing unauthorized operations. |
|---|
| 来源 | ⚠️ https://github.com/cowhrk/CVE/issues/1 |
|---|
| 用户 | chenfei13124 (UID 98107) |
|---|
| 提交 | 2026-05-13 09時24分 (5 月前) |
|---|
| 管理 | 2026-05-31 20時16分 (18 days later) |
|---|
| 状态 | 重复 |
|---|
| VulDB条目 | 299880 [PHPGurukul Curfew e-Pass Management System 1.0 /admin/search-pass.php searchdata SQL注入] |
|---|
| 积分 | 0 |
|---|