CVE-2024-11591: fallo de gravedad media en 1000 Projects Beauty Parlour Management System
1000 Projects Beauty Parlour Management System add-services.php sql injection
Publicada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 6.9epss 1.0%
A vulnerability, which was classified as critical, was found in 1000 Projects Beauty Parlour Management System 1.0. This affects an unknown part of the file /admin/add-services.php. The manipulation of the argument sername leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Productos afectados
1000 Projects · Beauty Parlour Management SystemCVEs relacionadas — 1000 Projects Beauty Parlour Management System
En el mismo producto, de las más peligrosas a las menos.
CVE-2024-11592MEDIUM1000 Projects Beauty Parlour Management System about-us.php sql injectionEPSS 0.9%CVE-2024-11649MEDIUM1000 Projects Beauty Parlour Management System search-appointment.php sql injectionEPSS 0.9%CVE-2024-11648MEDIUM1000 Projects Beauty Parlour Management System add-customer.php sql injectionEPSS 0.9%CVE-2024-11647MEDIUM1000 Projects Beauty Parlour Management System view-appointment.php sql injectionEPSS 0.9%CVE-2024-12234MEDIUM1000 Projects Beauty Parlour Management System edit-customer-detailed.php sql injectionEPSS 0.8%CVE-2024-11258MEDIUM1000 Projects Beauty Parlour Management System index.php sql injectionEPSS 0.8%