Description
Twitter-Clone 1 contains a SQL injection vulnerability in follow.php that allows attackers to manipulate database queries by injecting SQL code through the userid parameter. Attackers can submit union-based or time-based blind SQL injection payloads to extract sensitive database information including usernames, passwords, and database credentials.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Fyffe | PHP-Twitter-Clone | 1.0 | — |
References
- ExploitDB-45230 exploit
- Official Product Homepage product
- VulnCheck Advisory: Twitter-Clone 1 SQL Injection via follow.php third-party-advisory