CVE-2020-23833

Projectworlds House Rental v1.0 suffers from an unauthenticated SQL Injection vulnerability, allowing remote attackers to execute arbitrary code on the hosting webserver via a malicious index.php POST request...

CVE-2020-23833

CVE-2020-23833 affects Projectworlds House Rental v1.0. The vulnerability is an unauthenticated SQL Injection via a malicious POST to index.php, enabling remote attackers to execute arbitrary code on the hosting webserver. Root cause: insufficient input validation allowing SQL injection. Impact i...