Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-33968

Опубликовано: 06 авг. 2024
Источник: nvd
CVSS3: 9.8
CVSS3: 7.5
EPSS Низкий

Описание

SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'Attendance' and 'YearLevel' in '/AttendanceMonitoring/report/index.php' parameter.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:janobe:credit_card:1.0:*:*:*:*:*:*:*
cpe:2.3:a:janobe:debit_card_payment:1.0:*:*:*:*:*:*:*
cpe:2.3:a:janobe:paypal:1.0:*:*:*:*:*:*:*
cpe:2.3:a:janobe:school_attendence_monitoring_system:1.0:*:*:*:*:*:*:*
cpe:2.3:a:janobe:school_event_management_system:1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 39%
0.00175
Низкий

9.8 Critical

CVSS3

7.5 High

CVSS3

Дефекты

CWE-89

Связанные уязвимости

github логотип

GHSA-cp63-qrw4-jq9g

CVSS3: 9.8
github
больше 1 года назад

SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'Attendance' and 'YearLevel' in '/AttendanceMonitoring/report/index.php' parameter.

EPSS

Процентиль: 39%
0.00175
Низкий

9.8 Critical

CVSS3

7.5 High

CVSS3

Дефекты

CWE-89