Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-35520
HistoryApr 24, 2022 - 12:00 a.m.

Sourcecodester Baby Care System SQL注入漏洞(CNVD-2022-35520)

2022-04-2400:00:00
China National Vulnerability Database
www.cnvd.org.cn
8

0.002 Low

EPSS

Percentile

54.5%

Sourcecodester Baby Care System is an application of the Sourcecodester community in the United States. Sourcecodester Baby Care System v1.0 is vulnerable to SQL injection, which originates from /admin/uesrs.php & action=type & userrole=User & userid= in the userid parameter missing validation of external input SQL statement, an attacker can use this vulnerability to execute illegal SQL commands to steal sensitive database data.

CPENameOperatorVersion
sourcecodester baby care systemeq1.0

0.002 Low

EPSS

Percentile

54.5%

Related for CNVD-2022-35520