Vulnerability Description
An issue was discovered in SourceCodester Simple Grocery Store Sales And Inventory System 1.0. There was authentication bypass in web login functionality allows an attacker to gain client privileges via SQL injection in sales_inventory/login.php.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Simple Grocery Store Sales And Inventory Sales Project | Simple Grocery Store Sales And Inventory System | 1.0 |
Related Weaknesses (CWE)
References
- https://www.exploit-db.com/exploits/48879ExploitThird Party AdvisoryVDB Entry
- https://www.sourcecodester.com/php/14461/simple-grocery-store-sales-and-inventorProduct
- https://www.exploit-db.com/exploits/48879ExploitThird Party AdvisoryVDB Entry
- https://www.sourcecodester.com/php/14461/simple-grocery-store-sales-and-inventorProduct
FAQ
What is CVE-2020-28133?
CVE-2020-28133 is a vulnerability with a CVSS score of 9.8 (CRITICAL). An issue was discovered in SourceCodester Simple Grocery Store Sales And Inventory System 1.0. There was authentication bypass in web login functionality allows an attacker to gain client privileges v...
How severe is CVE-2020-28133?
CVE-2020-28133 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2020-28133?
Check the references section above for vendor advisories and patch information. Affected products include: Simple Grocery Store Sales And Inventory Sales Project Simple Grocery Store Sales And Inventory System.