← Zuruck zu CVEs

CVE-2020-37081

HIGH

7.1

Beschreibung

Fishing Reservation System 7.5 contains multiple remote SQL injection vulnerabilities in admin.php, cart.php, and calendar.php that allow attackers to inject malicious SQL commands. Attackers can exploit vulnerable parameters like uid, pid, type, m, y, and code to compromise the database management system and web application without user interaction.

CVE Details

CVSS v3.1 Bewertung7.1

SchweregradHIGH

CVSS VektorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N

AngriffsvektorNETWORK

KomplexitatLOW

Erforderliche PrivilegienNONE

BenutzerinteraktionREQUIRED

Veroffentlicht2/3/2026

Zuletzt geandert2/4/2026

Quellenvd

Honeypot-Sichtungen0

Schwachen (CWE)

CWE-89

Referenzen

https://fishingreservationsystem.com/index.html(disclosure@vulncheck.com)

https://www.exploit-db.com/exploits/48417(disclosure@vulncheck.com)

https://www.vulncheck.com/advisories/fishing-reservation-system-uid-sql-injection(disclosure@vulncheck.com)

https://www.vulnerability-lab.com/get_content.php?id=2243(disclosure@vulncheck.com)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.