ИнструментыУязвимости БДУБлоклистыРасширениеУтилитыБлогAPIМониторинг
Главная → Уязвимости → CVE-2024-25239
9.8критическая

CVE-2024-25239

Описание

SQL Injection vulnerability in Sourcecodester Employee Management System v1.0 allows attackers to run arbitrary SQL commands via crafted POST request to /emloyee_akpoly/Account/login.php.

Затрагиваемое ПО
Walterjnr1 Employee management system
CVSS
Балл9.8 — критическая
ВекторCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Источники
https://blu3ming.github.io/sourcecodester-employee-management-system-sql-injection/https://blu3ming.github.io/sourcecodester-employee-management-system-sql-injection/