SourceCodester Computer Parts Sales and Inventory System processlogin sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Computer Parts Sales and Inventory System 1.0. This affects an unknown part of the file processlogin. The manipulation of the argument user leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-222105 was assigned to this vulnerability.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

SQL命令中使用的特殊元素转义处理不恰当(SQL注入)

SourceCodester Computer Parts Sales and Inventory System SQL注入漏洞

Computer Parts Sales and Inventory System是Warren Daloyan个人开发者的一个计算机零件销售和库存系统。 SourceCodester Computer Parts Sales and Inventory System 1.0版本存在SQL注入漏洞，该漏洞源于文件processlogin存在未知部分，攻击者利用该漏洞可以通过参数 user 进行 sql 注入。

N/A

N/A