Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-58670
HistoryMay 16, 2022 - 12:00 a.m.

Online Sports Complex Booking System SQL注入漏洞(CNVD-2022-58670)

2022-05-1600:00:00
China National Vulnerability Database
www.cnvd.org.cn
17
online sports complex
booking system
sql注入漏洞
carlo montero
validation
external input
sql statements
exploitation
illegal sql commands
sensitive database data

EPSS

0.002

Percentile

54.5%

Online Sports Complex Booking System is an online stadium booking system by Carlo Montero, a personal developer. page=user/manage_user&id= lacks validation of external input SQL statements, which can be exploited to execute illegal SQL commands to steal sensitive database data.

EPSS

0.002

Percentile

54.5%

Related for CNVD-2022-58670