exploitDog

CVE-2022-28080

Опубликовано: 05 мая 2022

Источник: nvd

CVSS3: 8.8

CVSS2: 6.5

EPSS Средний

Описание

Royal Event Management System v1.0 was discovered to contain a SQL injection vulnerability via the todate parameter.

Ссылки

http://packetstormsecurity.com/files/167123/Royal-Event-Management-System-1.0-SQL-Injection.html
Exploit
Third Party Advisory
VDB Entry
https://github.com/erengozaydin/Royal-Event-Management-System-todate-SQL-Injection-Authenticated
Exploit
Third Party Advisory
https://www.sourcecodester.com/php/15238/event-management-system-project-php-source-code.html
Product
Third Party Advisory
https://www.sourcecodester.com/sites/default/files/download/oretnom23/Royal%20Event.zip
Product
Third Party Advisory
http://packetstormsecurity.com/files/167123/Royal-Event-Management-System-1.0-SQL-Injection.html
Exploit
Third Party Advisory
VDB Entry
https://github.com/erengozaydin/Royal-Event-Management-System-todate-SQL-Injection-Authenticated
Exploit
Third Party Advisory
https://www.sourcecodester.com/php/15238/event-management-system-project-php-source-code.html
Product
Third Party Advisory
https://www.sourcecodester.com/sites/default/files/download/oretnom23/Royal%20Event.zip
Product
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:event_management_system_project:event_management_system:1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 98%

0.62012

Средний

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-89

Связанные уязвимости

GHSA-r54g-jm5f-4gvj

CVSS3: 8.8

github

почти 4 года назад

Royal Event Management System v1.0 was discovered to contain a SQL injection vulnerability via the todate parameter.

EPSS

Процентиль: 98%

0.62012

Средний

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-89