Описание
An Incorrect Access Control vulnerability was found in /admin/delete_room.php in Kashipara Hotel Management System v1.0, which allows an unauthenticated attacker to delete valid hotel room entries in the administrator section.
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:jayesh:hotel_management_system:1.0:*:*:*:*:*:*:*
EPSS
Процентиль: 45%
0.00228
Низкий
7.5 High
CVSS3
Дефекты
NVD-CWE-noinfo
CWE-269
Связанные уязвимости
CVSS3: 7.5
github
больше 1 года назад
An Incorrect Access Control vulnerability was found in /admin/delete_room.php in Kashipara Hotel Management System v1.0, which allows an unauthenticated attacker to delete valid hotel room entries in the administrator section.
EPSS
Процентиль: 45%
0.00228
Низкий
7.5 High
CVSS3
Дефекты
NVD-CWE-noinfo
CWE-269