CVE-2020-21012: Hotel And Lodge Management System: SQL enjeksiyonu

Açıklama (NVD)

Sourcecodester Hotel and Lodge Management System 2.0 is vulnerable to unauthenticated SQL injection and can allow remote attackers to execute arbitrary SQL commands via the email parameter to the edit page for Customer, Room, Currency, Room Booking Details, or Tax Details.

Özet bilgiler

Ürün

Nikhil-bhalerao Hotel And Lodge Management System

CVSS v3.1

9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

%3,50 (yüzdelik 89)

CWE

CWE-89

Yama

Yok / bilinmiyor

Etkilenen sürümler

Kaynaklar

• NVD kaydı
• github.com
• github.com
• CWE-89