CVE-2020-25762

2020-09-2919:11:53

mitre

www.cve.org

9.2 High

AI Score

Confidence

High

0.054 Low

EPSS

Percentile

93.2%

JSON

An issue was discovered in SourceCodester Seat Reservation System 1.0. The file admin_class.php does not perform input validation on the username and password parameters. An attacker can send malicious input in the post request to /admin/ajax.php?action=login and bypass authentication, extract sensitive information etc.