SourceCodester Modern Loan Management System 1.0 уязвим к SQL-инъекциям в ajaxData.php через параметры District_id, Division_id, Region_id и Ward_id.
Показать оригинальное описание (EN)
SourceCodester Modern Loan Management System 1.0 is vulnerable to SQL Injection in ajaxData.php via the parameters district_id , division_id, region_id, and ward_id.
Ссылки 6
https://github.com/um-dsp/TaintRadar
cve@mitre.org
https://github.com/um-dsp/TaintRadar/blob/main/sql_injection_cves/loansystem/20…
cve@mitre.org
https://github.com/um-dsp/TaintRadar/blob/main/sql_injection_cves/loansystem/20…
cve@mitre.org
https://github.com/um-dsp/TaintRadar/blob/main/sql_injection_cves/loansystem/20…
cve@mitre.org
https://github.com/um-dsp/TaintRadar/blob/main/sql_injection_cves/loansystem/20…
cve@mitre.org
https://github.com/um-dsp/TaintRadar/blob/main/sql_injection_cves/loansystem/20…
cve@mitre.org