exploitDog

CVE-2024-36673

Опубликовано: 07 июн. 2024

Источник: nvd

CVSS3: 9.8

EPSS Низкий

Описание

Sourcecodester Pharmacy/Medical Store Point of Sale System 1.0 is vulnerable SQL Injection via login.php. This vulnerability stems from inadequate validation of user inputs for the email and password parameters, allowing attackers to inject malicious SQL queries.

Ссылки

https://github.com/CveSecLook/cve/issues/39
Exploit
Issue Tracking
Third Party Advisory
https://github.com/CveSecLook/cve/issues/39
Exploit
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:pharmacy\/medical_store_point_of_sale_system_project:pharmacy\/medical_store_point_of_sale_system:1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 28%

0.001

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-89

CWE-89

Связанные уязвимости

GHSA-5ww8-4ghx-pvcr

CVSS3: 9.8

github

больше 1 года назад

Sourcecodester Pharmacy/Medical Store Point of Sale System 1.0 is vulnerable SQL Injection via login.php. This vulnerability stems from inadequate validation of user inputs for the email and password parameters, allowing attackers to inject malicious SQL queries.

EPSS

Процентиль: 28%

0.001

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-89

CWE-89