CVE-2020-28073

概要

参考情報

• packetstormsecurity.com/files/160606/Library-Management-System-1.0-SQL-Injection.html · Exploit
• sourcecodester.com/php/14545/online-library-management-system-phpmysqli-full-source-code-2020.html · Product

library management system のその他の脆弱性

• CVE-2022-37794緊急 9.8In Library Management System 1.0 the /card/in-card.php file id_no parameters are vulnerable to SQL injection.
• CVE-2022-36735緊急 9.8Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at /admin/delete.php.
• CVE-2022-36734緊急 9.8Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the RollNo parameter at /admin/delstu.php.
• CVE-2022-36733緊急 9.8Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the M_Id parameter at /admin/del.php.
• CVE-2022-36732緊急 9.8Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /librarian/dele.php.