Описание
A blind SQL injection vulnerability exists in the Raymart DG / Ahmed Helal Hotel-mgmt-system. A malicious attacker can retrieve sensitive database information and interact with the database using the vulnerable cid parameter in process_update_profile.php.
Ссылки
- ExploitThird Party Advisory
- ProductThird Party Advisory
- ExploitThird Party Advisory
- ProductThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:hotel_management_system_project:hotel_management_system:-:*:*:*:*:*:*:*
EPSS
Процентиль: 91%
0.06322
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-89
Связанные уязвимости
github
больше 3 лет назад
A blind SQL injection vulnerability exists in the Raymart DG / Ahmed Helal Hotel-mgmt-system. A malicious attacker can retrieve sensitive database information and interact with the database using the vulnerable cid parameter in process_update_profile.php.
EPSS
Процентиль: 91%
0.06322
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-89