Sql injection

2021-10-0119:15:00

PRIOn knowledge base

www.prio-n.com

0.002 Low

EPSS

Percentile

61.3%

JSON

Sourcecodester Hotel and Lodge Management System 2.0 is vulnerable to unauthenticated SQL injection and can allow remote attackers to execute arbitrary SQL commands via the email parameter to the edit page for Customer, Room, Currency, Room Booking Details, or Tax Details.

CPENameOperatorVersion
hotel_and_lodge_booking_management_systemeq2.0

CPE	Name	Operator	Version
	hotel_and_lodge_booking_management_system	eq	2.0

References

github.com/hitIer/web_test/tree/master/hotel

0.002 Low

EPSS

Percentile

61.3%

JSON

Related for PRION:CVE-2020-21012