code-projects Simple Ticket Booking Registration register_insert.php sql injection

A vulnerability was found in code-projects Simple Ticket Booking 1.0. It has been classified as critical. Affected is an unknown function of the file register_insert.php of the component Registration Handler. The manipulation of the argument name/email/dob/password/Gender/phone leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

SQL命令中使用的特殊元素转义处理不恰当(SQL注入)

Code-Projects Simple Ticket Booking SQL注入漏洞

Code-Projects Simple Ticket Booking是Code-Projects开源的一个简单订票系统。 Code-Projects Simple Ticket Booking 1.0 版本存在SQL注入漏洞，该漏洞源于 register_insert.php 文件的 Registration Handler 组件中的 name/email/dob/password/Gender/phone 参数包含一个 SQL 注入漏洞。

N/A

N/A