PT-2021-22295
CVE-2021-38840
·
تاريخ النشر
2021-09-07
·
تاريخ التحديث
2021-11-28
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Simple Water Refilling Station Management System version 1.0
Description
SQL Injection can occur via the
username parameter in the water refilling/classes/Login.php file. This issue allows for potential SQL injection attacks.Recommendations
For Simple Water Refilling Station Management System version 1.0, consider disabling the
username parameter in the water refilling/classes/Login.php file until a patch is available. Restrict access to the Login.php file to minimize the risk of exploitation. Avoid using the username parameter in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.قابلية الاستغلال
استغلال
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾