Sourcecodester Baby Care System SQL注入漏洞（CNVD-2022-35529）

2022-04-2400:00:00

China National Vulnerability Database

www.cnvd.org.cn

sourcecodester

baby care system

sql injection

vulnerability

pagerole.php

display

roleid

validation

attacker

illegal sql commands

sensitive database data

EPSS

0.002

Percentile

54.5%

JSON

Sourcecodester Baby Care System is an application of the Sourcecodester community in the United States. Sourcecodester Baby Care System v1.0 contains a SQL injection vulnerability that originates in /admin/pagerole.php & action=display & value=1 & roleid= where the roleid parameter lacks validation for external input SQL statement, an attacker can use this vulnerability to execute illegal SQL commands to steal sensitive database data.

EPSS

0.002

Percentile

54.5%

JSON

Related for CNVD-2022-35529