2 matches found
CVE-2021-40907: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in Sourcecodester Storage Unit Rental Management System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username parameter to /storage/classes/Login.php...
9.8CVSS6.3AI score0.01254EPSS
SaveExploits1References2
PT-2022-11335
Name of the Vulnerable Software and Affected Versions Sourcecodester Storage Unit Rental Management System version v1 Description The issue allows attackers to execute arbitrary SQL commands via the username parameter to the "/storage/classes/Login.php" API endpoint. This enables potential...
9.8CVSS0.01254EPSS
SaveExploits1References4
20