CVE-2020-28133
Critical
Description
An issue was discovered in SourceCodester Simple Grocery Store Sales And Inventory System 1.0. There was authentication bypass in web login functionality allows an attacker to gain client privileges via SQL injection in sales_inventory/login.php.
SeverityCritical
CVSS9.8
Exploit probability—
ProductSimple Grocery Store Sales And Inventory Sales Project Simple Grocery Store Sales And Inventory System
PublishedNov 17, 2020
First seenNov 17, 2020
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| simple_grocery_store_sales_and_inventory_sales_project simple_grocery_store_sales_and_inventory_system | 1.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.