5 matches found
CVE-2019-6497
HotelsServer through 2018-11-05 has SQL Injection via the controller/fetchpwd.php username parameter...
Default credentials
controller/fetchpwd.php and controller/doAction.php in HotelsServer through 2018-11-05 rely on base64 in an attempt to protect password storage...
Sql injection
HotelsServer through 2018-11-05 has SQL Injection via the controller/fetchpwd.php username parameter...
CVE-2019-6497
HotelsServer through 2018-11-05 has SQL Injection via the controller/fetchpwd.php username parameter...
CVE-2019-6497
Technical details about CVE-2019-6497 are not publicly provided in the supplied documents. Monitor for updates from vendors and CERT/NSCs for affected products, versions, and fix information.