by Kastro
Paper/Archive/CVE-2020-25905

CVE-2020-25905

mitre — An SQL Injection vulnerabilty exists in Sourcecodester Mobile Shop System in PHP MySQL 1.0 via the email parameter in (1) login.php or (2…

EPSS 2%CVSS 9.8
critical.is priorityof 100
45
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 76.7.767 × 2015.3No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

An SQL Injection vulnerabilty exists in Sourcecodester Mobile Shop System in PHP MySQL 1.0 via the email parameter in (1) login.php or (2) LoginAsAdmin.php.

Affected

ProductAffectedFixed inSource
n/an/a–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refpacketstormsecurity.com/files/159132/Mobile-Shop-System-1.0-SQL-Injection.htmlrefexploit-db.com/exploits/48916