PT-2026-66377
CVE-2026-13395
·
تاريخ النشر
2026-07-30
·
تاريخ التحديث
2026-08-03
الوصف من
CVSS 3.1
8.6
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Online Scheduling and Appointment Booking System versions prior to 27.8
Description
Unauthenticated attackers can perform SQL injection attacks via front-end booking requests. The issue occurs because the system fails to sanitize or properly cast a user-supplied parameter before incorporating it into a SQL query. This allows attackers to append additional queries to extract sensitive information, such as password hashes, from the database.
Recommendations
Update to version 27.8 or later.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾