CVE-2024-3351: falha de alta gravidade em SourceCodester Aplaya Beach Resort Online…
SourceCodester Aplaya Beach Resort Online Reservation System index.php sql injection
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.3epss 0.9%
A vulnerability, which was classified as critical, was found in SourceCodester Aplaya Beach Resort Online Reservation System 1.0. This affects an unknown part of the file admin/mod_roomtype/index.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-259455.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Produtos afetados
SourceCodester · Aplaya Beach Resort Online Reservation SystemCVEs relacionadas — SourceCodester Aplaya Beach Resort Online…
No mesmo produto, das mais perigosas para as menos.
CVE-2024-3356HIGHSourceCodester Aplaya Beach Resort Online Reservation System sql injectionEPSS 0.9%CVE-2024-3355HIGHSourceCodester Aplaya Beach Resort Online Reservation System sql injectionEPSS 0.9%CVE-2024-3354HIGHSourceCodester Aplaya Beach Resort Online Reservation System index.php sql injectionEPSS 0.9%CVE-2024-3352HIGHSourceCodester Aplaya Beach Resort Online Reservation System index.php sql injectionEPSS 0.9%CVE-2024-3350HIGHSourceCodester Aplaya Beach Resort Online Reservation System index.php sql injectionEPSS 0.9%CVE-2024-3349HIGHSourceCodester Aplaya Beach Resort Online Reservation System login.php sql injectionEPSS 0.9%