ZeroHour

CVE-2020-24197

PoC
CVSS 3.1
9.8 critical
EPSS
1%p71
Published
()
Modified
Description

A SQL injection vulnerability in the login component in Stock Management System v1.0 allows remote attacker to execute arbitrary SQL commands via the username parameter.

Vendors
stock management system project
Products
stock management system
Weakness
CWE-89
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

In the news

No ingested article mentions this CVE yet.