PT-2023-23371 · Unknown · Pharmacy Management System
CVE-2023-31519
·
Publicado
2023-05-16
·
Atualizado
2025-01-23
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Pharmacy Management System version 1.0
Description
The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the
email parameter at the login core.php file.Recommendations
For Pharmacy Management System version 1.0, consider restricting access to the login core.php file until a patch is available. As a temporary workaround, avoid using the
email parameter in the affected login functionality to minimize the risk of exploitation.Exploit
Correção
SQL injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Pharmacy Management System