Code-Projects Online Music Site SQL注入漏洞

Code-Projects Online Music Site is an open source online music site by Code-Projects. A SQL injection vulnerability exists in Code-Projects Online Music Site version 1.0, which stems from an incorrect manipulation of the parameter fname in the file /Frontend/Feedback.php, which could lead to a SQ...