SQL Injection Vulnerability in Salon Booking System

CVE-2024-39658
7.2HIGH

Key Information

Vendor
Salon Booking System
Status
Salon Booking System
Vendor
CVE Published:
29 August 2024

Summary

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Salon Booking System Salon booking system allows SQL Injection.This issue affects Salon booking system: from n/a through 10.7.

Affected Version(s)

Salon booking system <= 10.7

CVSS V3.1

Score:
7.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published.

  • Vulnerability Reserved.

Collectors

NVD DatabaseMitre Database

Credit

justakazh (Patchstack Alliance)
.