CVE-2021-33948

SQL injection vulnerability in FantasticLBP Hotels Server v1.0 allows attacker to execute arbitrary code via the username parameter...

CVE-2021-33948

CVE-2021-33948 describes a SQL injection in FantasticLBP Hotels Server v1.0 where an attacker can inject via the username parameter to execute arbitrary code. The vulnerability is rated CRITICAL (CVSS v3.1: 9.8) with a NETWORK attack vector, no privileges required , and no user interaction needed...

CVE-2021-33948

SQL injection vulnerability in FantasticLBP Hotels Server v1.0 allows attacker to execute arbitrary code via the username parameter...