Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-29365
HistoryApr 16, 2023 - 12:00 a.m.

Sales Tracker Management System SQL Injection Vulnerability (CNVD-2023-29365)

2023-04-1600:00:00
China National Vulnerability Database
www.cnvd.org.cn
9
sales tracker
management system
sql injection
vulnerability
validation
parameter
attack
database
data

0.002 Low

EPSS

Percentile

53.3%

Sales Tracker Management System is a sales tracking management system. Sales Tracker Management System v1.0 is vulnerable to SQL injection. The vulnerability originates from the missing validation of the parameter id of /admin/products/manage_product.php for external input SQL statements. An attacker could use this vulnerability to execute illegal SQL commands to steal sensitive database data.

0.002 Low

EPSS

Percentile

53.3%

Related for CNVD-2023-29365