PT-2020-15612
CVE-2020-23980
·
Published
2020-08-27
·
Updated
2020-09-01
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
DesignMasterEvents Conference management version 1.0.0
Description
The issue allows SQL Injection via the
username field on the administrator login page.Recommendations
For DesignMasterEvents Conference management version 1.0.0, avoid using the
username field in the administrator login page until the issue is resolved. As a temporary workaround, consider restricting access to the administrator login page to minimize the risk of exploitation.Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾