Описание
A SQL Injection vulnerability was found in /covid-tms/password-recovery.php in PHPGurukul COVID 19 Testing Management System v1.0, which allows remote attackers to execute arbitrary code via the contactno POST request parameter.
Ссылки
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:phpgurukul:covid19_testing_management_system:1.0:*:*:*:*:*:*:*
EPSS
Процентиль: 30%
0.00113
Низкий
7.3 High
CVSS3
Дефекты
CWE-89
Связанные уязвимости
CVSS3: 7.3
github
около 1 года назад
A SQL Injection vulnerability was found in /covid-tms/password-recovery.php in PHPGurukul COVID 19 Testing Management System v1.0, which allows remote attackers to execute arbitrary code via the contactno POST request parameter.
EPSS
Процентиль: 30%
0.00113
Низкий
7.3 High
CVSS3
Дефекты
CWE-89