Описание
The Le-yan dental management system contains an SQL-injection vulnerability. An unauthenticated remote attacker can inject SQL commands into the input field of the login page to acquire administrator’s privilege and perform arbitrary operations on the system or disrupt service.
Ссылки
- Third Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:le-yan_dental_management_system_project:le-yan_dental_management_system:2.8.5:*:*:*:*:*:*:*
EPSS
Процентиль: 87%
0.0316
Низкий
9.8 Critical
CVSS3
10 Critical
CVSS2
Дефекты
CWE-89
CWE-89
Связанные уязвимости
github
около 4 лет назад
The Le-yan dental management system contains an SQL-injection vulnerability. An unauthenticated remote attacker can inject SQL commands into the input field of the login page to acquire administrator’s privilege and perform arbitrary operations on the system or disrupt service.
EPSS
Процентиль: 87%
0.0316
Низкий
9.8 Critical
CVSS3
10 Critical
CVSS2
Дефекты
CWE-89
CWE-89