Hotels_Server through 2018-11-05 has SQL Injection via the controller/fetchpwd.php username parameter.

Published Jan 19, 2019 · Updated Sep 16, 2024 · Assigned by mitre