Description
Hotels_Server through 2018-11-05 has SQL Injection via the API because the controller/api/login.php telephone parameter is mishandled.
Unscored
CVE-2019-8393
EUVD-2019-17783GHSA-42fc-7898-wh2w
Hotels_Server through 2018-11-05 has SQL Injection via the API because the controller/api/login.php telephone parameter is mishandled.
Published Feb 17, 2019 · Updated Aug 4, 2024 · Assigned by mitre