Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4fv5-wjqm-7f2r

Опубликовано: 28 сент. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

Asset Management System v1.0 is vulnerable to an

unauthenticated SQL Injection vulnerability on the

'email' parameter of index.php page, allowing an

external attacker to dump all the contents of the

database contents and bypass the login control.

Asset Management System v1.0 is vulnerable to an

unauthenticated SQL Injection vulnerability on the

'email' parameter of index.php page, allowing an

external attacker to dump all the contents of the

database contents and bypass the login control.

EPSS

Процентиль: 11%
0.00037
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-89

Связанные уязвимости

CVSS3: 9.8
nvd
больше 2 лет назад

Asset Management System v1.0 is vulnerable to an unauthenticated SQL Injection vulnerability on the 'email' parameter of index.php page, allowing an external attacker to dump all the contents of the database contents and bypass the login control.

EPSS

Процентиль: 11%
0.00037
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-89