PT-2020-16931
CVE-2020-28133
·
تاريخ النشر
2020-11-17
·
تاريخ التحديث
2020-12-09
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
SourceCodester Simple Grocery Store Sales And Inventory System version 1.0
Description
An issue was discovered in the web login functionality, allowing authentication bypass. This enables an attacker to gain client privileges via SQL injection in the sales inventory/login.php file.
Recommendations
For version 1.0, consider disabling the login functionality in sales inventory/login.php until a patch is available to prevent SQL injection attacks. Restrict access to the sales inventory/login.php file to minimize the risk of exploitation. Avoid using the login functionality in the affected version until the issue is resolved.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾