geraked/phpscript-sgh

geraked/phpscript-sgh

Releases1
Frequency
Last Release
Stars18
PHP Script For Loan Fund Management

CVE History

CVEPublishedCVSS v3CVSS v2
8.2 HIGH

Phpscript-sgh 0.1.0 contains a time-based blind SQL injection vulnerability in the admin interface that allows attackers to manipulate database queries through the 'id' parameter. Attackers can exploit this vulnerability by crafting malicious payloads that trigger time delays, enabling them to extract sensitive database information through conditional sleep techniques.