CVE-2020-24208

2020-08-1716:05:27

mitre

www.cve.org

10 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.2%

JSON

A SQL injection vulnerability in SourceCodester Online Shopping Alphaware 1.0 allows remote unauthenticated attackers to bypass the authentication process via email and password parameters.

References

packetstormsecurity.com/files/158684/Online-Shopping-Alphaware-1.0-SQL-Injection.html

www.exploit-db.com/exploits/48725

www.sourcecodester.com/download-code?nid=14368&title=Online+Shopping+Alphaware+in+PHP%2FMysql