Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/10 12:00 a.m.•2 views

CVE-2020-26630: Improper Neutralization of Special Elements used in an SQL Command

A Time-Based SQL Injection vulnerability was discovered in Hospital Management System V4.0 which can allow an attacker to dump database information via a special payload in the 'Doctor Specialization' field under the 'Go to Doctors' tab after logging in as an admin...

4.9CVSS6.5AI score0.00707EPSS
SaveExploits3References3
Rows per page
Query Builder