CSRF

A hacker can inject arbitrary SQL codes in the id parameter to inject SQL codes that may delete, insert, update, or retrieve data. If you

This flaw could be exploited by injecting malicious code into the database or via cross-site request forgery (CSRF) if users’ input was hijacked. The id

An attacker can leverage this vector to inject arbitrary SQL commands into the application or retrieve existing data. Successfully exploiting this issue can result in

A remote attacker could exploit this vulnerability to execute arbitrary SQL commands and retrieve sensitive data. In addition, this software was discovered to contain a