Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Sourcecodester Online Covid Vaccination Scheduler System 1.0 is vulnerable to SQL Injection. The username parameter is vulnerable to time-based SQL injection. Upon successful dumping the admin password hash, an attacker can decrypt and obtain the plain-text password. Hence, the attacker could authenticate as Administrator.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
SourceCodester Online Covid Vaccination Scheduler System SQL注入漏洞
Vulnerability Description
SourceCodester Online Covid Vaccination Scheduler System是SourceCodester公司的一个应用系统。通过可靠的疫苗计划和队列管理解决方案有效管理 COVID-19 疫苗接种。 Sourcecodester Online Covid Vaccination Scheduler System 存在SQL注入漏洞，该漏洞源于Sourcecodester在线Covid疫苗接种计划系统1.0存在SQL注入漏洞，username参数容易受到基于时间的SQL
CVSS Information
N/A
Vulnerability Type
N/A