PT-2020-10390
CVE-2019-20337
·
تاريخ النشر
2020-01-05
·
تاريخ التحديث
2020-01-09
الوصف من
CVSS 3.1
7.2
عاليةالمقاييسAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
PHP Scripts Mall advanced-real-estate-script version 4.0.9
Description
The issue concerns a SQL Injection vulnerability. Specifically, the
news id parameter in the news edit.php script is vulnerable.Recommendations
For version 4.0.9, avoid using the
news id parameter in the news edit.php script until the issue is resolved. As a temporary workaround, consider validating and sanitizing user input for the news id parameter to minimize the risk of exploitation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾