从这个网页截图中，可以获取到以下关于漏洞的关键信息： 1. **漏洞标题**：SourceCodester Simple Forum Website 1.0 SQL Injection 2. **漏洞描述**： - SQL Injection vulnerability was discovered in Sourcecodester's Sentiment Based Movie Success Rating Prediction System (user registration) - SQL Injection vulnerability was found in the Sentiment Based Movie Success Rating Prediction System of SourceCodester. 3. **受影响的版本**：1.0 4. **相关代码文件**：/msrps/classes/Users.php 5. **漏洞细节**： - The email variable is directly inserted into the SQL query without any escaping or parameterization. - An attacker could inject malicious SQL code by manipulating the email field. - Line number 135 of Users.php is affected. 6. **复现步骤**： 1. Install and Setup the Movie Rating Application 2. Click on Login 3. Click on Create a New Account Option 4. Fill the form and intercept the POST request in burp and copy the request 5. Store this request in a .txt file eg: register_req.txt 6. Run sqlmap 7. Observe the SQL injection 8. **提交信息**： - Source: https://github.com/gurudattch/CVEs/blob/main/Sourcecodester-SQLi-Sentiment-Based-Moive-Rating.md - User: guru (ID 74056) - Submission Date: 08/29/2024 11:50 AM (2 days ago) - Moderation Date: 08/30/2024 09:50 AM (22 hours later) 这些信息详细描述了漏洞的性质、受影响的系统、复现步骤以及提交和审核的时间。