CVE-2019-6497

HotelsServer through 2018-11-05 has SQL Injection via the controller/fetchpwd.php username parameter...

PT-2019-18119

Name of the Vulnerable Software and Affected Versions Hotels Server versions prior to 2018-11-05 Description The issue allows for SQL Injection via the username parameter in the "controller/fetchpwd.php" API endpoint. Recommendations For versions prior to 2018-11-05, update to a version released...

CVE-2019-6497: Improper Neutralization of Special Elements used in an SQL Command

HotelsServer through 2018-11-05 has SQL Injection via the controller/fetchpwd.php username parameter...