PT-2020-17319
CVE-2020-35378
·
تاريخ النشر
2020-12-14
·
تاريخ التحديث
2020-12-14
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Online Bus Ticket Reservation version 1.0
Description
The issue allows attackers to execute arbitrary SQL commands and bypass authentication via the
username and password fields in the login page.Recommendations
For Online Bus Ticket Reservation version 1.0, as a temporary workaround, consider restricting access to the login page or validating and sanitizing user input for the
username and password fields to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾