Описание
Restaurant Reservation System 1.0 suffers from an authenticated SQL injection vulnerability, which allows a remote, authenticated attacker to execute arbitrary SQL commands via the date parameter in includes/reservation.inc.php.
Ссылки
- Third Party AdvisoryVDB Entry
- Product
- Third Party AdvisoryVDB Entry
- Product
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:restaurant_reservation_system_project:restaurant_reservation_system:1.0:*:*:*:*:*:*:*
EPSS
Процентиль: 60%
0.0039
Низкий
8.8 High
CVSS3
6.5 Medium
CVSS2
Дефекты
CWE-89
Связанные уязвимости
github
больше 3 лет назад
Restaurant Reservation System 1.0 suffers from an authenticated SQL injection vulnerability, which allows a remote, authenticated attacker to execute arbitrary SQL commands via the date parameter in includes/reservation.inc.php.
EPSS
Процентиль: 60%
0.0039
Низкий
8.8 High
CVSS3
6.5 Medium
CVSS2
Дефекты
CWE-89