Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9cpm-2q59-cph3

Опубликовано: 02 дек. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

PHPGurukul Billing System 1.0 is vulnerable to SQL Injection in the admin/index.php endpoint. Specifically, the username parameter accepts unvalidated user input, which is then concatenated directly into a backend SQL query.

PHPGurukul Billing System 1.0 is vulnerable to SQL Injection in the admin/index.php endpoint. Specifically, the username parameter accepts unvalidated user input, which is then concatenated directly into a backend SQL query.

EPSS

Процентиль: 9%
0.00033
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-89

Связанные уязвимости

CVSS3: 6.5
nvd
2 месяца назад

PHPGurukul Billing System 1.0 is vulnerable to SQL Injection in the admin/index.php endpoint. Specifically, the username parameter accepts unvalidated user input, which is then concatenated directly into a backend SQL query.

EPSS

Процентиль: 9%
0.00033
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-89