PT-2022-18737
CVE-2022-27991
·
تاريخ النشر
2022-04-08
·
تاريخ التحديث
2022-04-14
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Online Banking System in PHP version 1
Description
The issue concerns multiple SQL injection vulnerabilities. These vulnerabilities are located at the "/staff login.php" endpoint via the
Staff ID and Staff Password parameters.Recommendations
For Online Banking System in PHP version 1, consider disabling the
/staff login.php endpoint until a patch is available. Restrict access to the Staff ID and Staff Password parameters in the affected endpoint to minimize the risk of exploitation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾