5 matches found
CVE-2019-6497
HotelsServer through 2018-11-05 has SQL Injection via the controller/fetchpwd.php username parameter...
9.8CVSS8.3AI score0.0104EPSS
SaveExploits1References1
Default credentials
controller/fetchpwd.php and controller/doAction.php in HotelsServer through 2018-11-05 rely on base64 in an attempt to protect password storage...
5CVSS7.6AI score0.00942EPSS
SaveExploits1References1Affected Software1
Sql injection
HotelsServer through 2018-11-05 has SQL Injection via the controller/fetchpwd.php username parameter...
7.5CVSS9.9AI score0.0104EPSS
SaveExploits1References1Affected Software1
CVE-2019-6497
HotelsServer through 2018-11-05 has SQL Injection via the controller/fetchpwd.php username parameter...
10AI score0.0104EPSS
SaveExploits1References1
CVE-2019-6497
Technical details about CVE-2019-6497 are not publicly provided in the supplied documents. Monitor for updates from vendors and CERT/NSCs for affected products, versions, and fix information.
9.8CVSS9.9AI score0.0104EPSS
SaveExploits1References1Affected Software1
20