CVE-2020-5307

EPSS 15.7%

Vexday Risk Score

23Bajo

Decisión SSVC (CISA)

Attend

PoC disponible → seguir de cerca

Madurez del exploit

Exploit funcional

Exploit automatizable disponible (Nuclei/Metasploit).

CVSS —EPSS 15.7%KEV nãoPoC —Nuclei simMetasploit —Patch —

Ciclo de vida

07 ene 2020Publicada en NVD

Recomendación: Planificar corrección próxima — ya existe PoC pública.

PHPGurukul Dairy Farm Shop Management System 1.0 is vulnerable to SQL injection, as demonstrated by the username parameter in index.php, the category and CategoryCode parameters in add-category.php, the CompanyName parameter in add-company.php, and the ProductName and ProductPrice parameters in add-product.php.

Productos afectados

n/a · n/a

Referencias

https://cinzinga.github.io/CVE-2020-5307-5308/https://www.exploit-db.com/exploits/47846