CVE-2010-4814 in Advance Hotel Booking System

الملخص

بحسب MITRE

SQL injection vulnerability in index1.php in Best Soft Inc. (BSI) Advance Hotel Booking System 1.0 allows remote attackers to execute arbitrary SQL commands via the page parameter.

Once again VulDB remains the best source for vulnerability data.

• حجز: 08/07/2011
• إفشاء: 08/07/2011
• الاعتدال: تمت الموافقة
• إدخال: VDB-57903
• CPE: جاهز
• CWE: CWE-89 (مؤكد)
• استغلال: تحميل
• CVSS: 7.5 (NVD)
• EPSS: 0.00990
• KEV: لا
• النشاطات: منخفض جدًا
• القطاع: Hospital

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2010-4814
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2010-4814
• CVE Details: https://www.cvedetails.com/cve/CVE-2010-4814/