Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-52qf-8fcc-9f9g

Опубликовано: 18 авг. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

Online Shopping Portal Project 3.1 allows remote attackers to execute arbitrary SQL commands/queries via the login form, leading to unauthorized access and potential data manipulation. This vulnerability arises due to insufficient validation of user-supplied input in the username field, enabling SQL Injection attacks.

Online Shopping Portal Project 3.1 allows remote attackers to execute arbitrary SQL commands/queries via the login form, leading to unauthorized access and potential data manipulation. This vulnerability arises due to insufficient validation of user-supplied input in the username field, enabling SQL Injection attacks.

EPSS

Процентиль: 87%
0.03209
Низкий

8.8 High

CVSS3

Дефекты

CWE-89

Связанные уязвимости

CVSS3: 8.8
nvd
больше 2 лет назад

Online Shopping Portal Project 3.1 allows remote attackers to execute arbitrary SQL commands/queries via the login form, leading to unauthorized access and potential data manipulation. This vulnerability arises due to insufficient validation of user-supplied input in the username field, enabling SQL Injection attacks.

EPSS

Процентиль: 87%
0.03209
Низкий

8.8 High

CVSS3

Дефекты

CWE-89