Vulnerability Description
SourceCodester Library Management System 1.0 is affected by SQL Injection allowing an attacker to bypass the user authentication and impersonate any user on the system.
CVSS Score
9.8
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Library Management System Project | Library Management System | 1.0 |
Related Weaknesses (CWE)
References
- http://packetstormsecurity.com/files/160606/Library-Management-System-1.0-SQL-InExploitThird Party AdvisoryVDB Entry
- https://www.sourcecodester.com/php/14545/online-library-management-system-phpmysProductThird Party Advisory
- http://packetstormsecurity.com/files/160606/Library-Management-System-1.0-SQL-InExploitThird Party AdvisoryVDB Entry
- https://www.sourcecodester.com/php/14545/online-library-management-system-phpmysProductThird Party Advisory
FAQ
What is CVE-2020-28073?
CVE-2020-28073 is a vulnerability with a CVSS score of 9.8 (CRITICAL). SourceCodester Library Management System 1.0 is affected by SQL Injection allowing an attacker to bypass the user authentication and impersonate any user on the system.
How severe is CVE-2020-28073?
CVE-2020-28073 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2020-28073?
Check the references section above for vendor advisories and patch information. Affected products include: Library Management System Project Library Management System.