Vulnerable #4

Open

opened

on May 22, 2022

codem-craft/server/main.lua

Lines 54 to 56 in ed5f765

    
           local data = ExecuteSql( 
        
               "INSERT INTO `codem_craft` (`identifier`,`weaponname`,`weapontime`,`weaponlabel`,`itemTime`,`images`) VALUES ('" .. 
        
                   identifier .. "','" .. a .. "','" .. b .. "','" .. c .. "','" .. time .. "','" .. e .. "')")

SQL Injection vulnerable

Metadata

Assignees

No one assigned

Labels

No labels

No labels

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests