Описание
SQL injection bypass authentication vulnerability in PHPGURUKUL Employee Record Management System 1.2 via index.php. An attacker can log in as an admin account of this system and can destroy, change or manipulate all sensitive information on the system.
Ссылки
- ExploitThird Party Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:phpgurukul:employee_record_management_system:1.2:*:*:*:*:*:*:*
EPSS
Процентиль: 32%
0.00125
Низкий
9.8 Critical
CVSS3
10 Critical
CVSS2
Дефекты
CWE-89
Связанные уязвимости
CVSS3: 9.8
github
около 4 лет назад
SQL injection bypass authentication vulnerability in PHPGURUKUL Employee Record Management System 1.2 via index.php. An attacker can log in as an admin account of this system and can destroy, change or manipulate all sensitive information on the system.
EPSS
Процентиль: 32%
0.00125
Низкий
9.8 Critical
CVSS3
10 Critical
CVSS2
Дефекты
CWE-89