Описание
A SQL Injection vulnerability was found in /bpms/index.php in Source Code and Project Beauty Parlour Management System V1.1, which allows remote attackers to execute arbitrary code via the name POST request parameter.
Ссылки
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:darkseid:beauty_parlour_management_system:1.1:*:*:*:*:*:*:*
EPSS
Процентиль: 34%
0.00138
Низкий
5.9 Medium
CVSS3
Дефекты
CWE-89
Связанные уязвимости
CVSS3: 5.9
github
12 месяцев назад
A SQL Injection vulnerability was found in /bpms/index.php in Source Code and Project Beauty Parlour Management System V1.1, which allows remote attackers to execute arbitrary code via the name POST request parameter.
EPSS
Процентиль: 34%
0.00138
Низкий
5.9 Medium
CVSS3
Дефекты
CWE-89