PT-2023-11774 · Unknown · Projectworlds Online Doctor Appointment Booking System

CVE-2020-29168

·

Publicado

2023-02-17

·

Atualizado

2023-02-27

CVSS v3.1

9.8

Crítica

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Projectworlds Online Doctor Appointment Booking System (affected versions not specified)
Description The issue allows attackers to gain sensitive information via the "getuser.php" endpoint, specifically through the q parameter. This is a SQL Injection vulnerability.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

SQL injection

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2020-29168

Produtos afetados

Projectworlds Online Doctor Appointment Booking System