PT-2022-11981
CVE-2021-44090
·
تاريخ النشر
2022-01-20
·
تاريخ التحديث
2022-01-26
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Sourcecodester Online Reviewer System version 1.0
Description
An SQL Injection issue exists via the
password parameter.Recommendations
For version 1.0, avoid using the
password parameter in the affected API endpoint until the issue is resolved.
As a temporary workaround, consider restricting access to the login functionality to minimize the risk of exploitation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾