Описание
A vulnerability, which was classified as critical, was found in PHPGurukul Nipah Virus Testing Management System 1.0. This affects an unknown part of the file password-recovery.php. The manipulation of the argument username/contactno leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Ссылки
- ExploitMitigationThird Party Advisory
- Product
- Permissions RequiredThird Party Advisory
- Permissions RequiredThird Party Advisory
- Third Party AdvisoryVDB Entry
- ExploitMitigationThird Party Advisory
- Permissions RequiredThird Party Advisory
- Permissions RequiredThird Party Advisory
Уязвимые конфигурации
EPSS
7.3 High
CVSS3
9.8 Critical
CVSS3
7.5 High
CVSS2
Дефекты
Связанные уязвимости
A vulnerability, which was classified as critical, was found in PHPGurukul Nipah Virus Testing Management System 1.0. This affects an unknown part of the file password-recovery.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-247341 was assigned to this vulnerability.
Уязвимость сценария password-recovery.php программного средства управления тестированием на вирус Нипах PHPGurukul Nipah Virus Testing Management System, позволяющая нарушителю выполнять произвольные SQL-запросы к базе данных
EPSS
7.3 High
CVSS3
9.8 Critical
CVSS3
7.5 High
CVSS2