Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-j87w-85w8-q3v3

Опубликовано: 29 дек. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection on the Users login panel because of "password" parameter is directly used in the SQL query without any sanitization and the SQL Injection payload being executed.

PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection on the Users login panel because of "password" parameter is directly used in the SQL query without any sanitization and the SQL Injection payload being executed.

EPSS

Процентиль: 21%
0.0007
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-89

Связанные уязвимости

CVSS3: 9.8
nvd
около 2 лет назад

PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection on the Users login panel because of "password" parameter is directly used in the SQL query without any sanitization and the SQL Injection payload being executed.

EPSS

Процентиль: 21%
0.0007
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-89