Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-h9pf-hjmx-3mpq

Опубликовано: 24 дек. 2021
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

The password parameter on Simple Online Mens Salon Management System (MSMS) 1.0 appears to be vulnerable to SQL injection attacks through the password parameter. The predictive tests of this application interacted with that domain, indicating that the injected SQL query was executed. The attacker can retrieve all authentication and information about the users of this system.

The password parameter on Simple Online Mens Salon Management System (MSMS) 1.0 appears to be vulnerable to SQL injection attacks through the password parameter. The predictive tests of this application interacted with that domain, indicating that the injected SQL query was executed. The attacker can retrieve all authentication and information about the users of this system.

EPSS

Процентиль: 52%
0.00295
Низкий

7.5 High

CVSS3

Дефекты

CWE-89

Связанные уязвимости

CVSS3: 7.5
nvd
около 4 лет назад

The password parameter on Simple Online Mens Salon Management System (MSMS) 1.0 appears to be vulnerable to SQL injection attacks through the password parameter. The predictive tests of this application interacted with that domain, indicating that the injected SQL query was executed. The attacker can retrieve all authentication and information about the users of this system.

EPSS

Процентиль: 52%
0.00295
Низкий

7.5 High

CVSS3

Дефекты

CWE-89