8.5
High
CVE-2024-53815 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in DOTonPAPER…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in DOTonPAPER Pinpoint Booking System booking-system allows Blind SQL Injection.This issue affects Pinpoint Booking System: from n/a through <= 2.9.9.5.1.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Pinpoint Booking System 2.9 | earliest → 2.9.9.5.1 | No fix stated |
| pinpoint_booking_system 2.9 | earliest → 2.9.9.5.1 | No fix stated |
| Pinpoint Booking System 2.9 | earliest → 2.9.9.5.1 | No fix stated |
Other CVEs of Pinpoint Booking System
The 5 CVEs of Pinpoint Booking System →
CVE-2024-49304
Cross-Site Request Forgery (CSRF) vulnerability in DOTonPAPER Pinpoint Booking System booking-system allows Stored…
5.4
Medium
CVE-2023-38520
External Control of Assumed-Immutable Web Parameter vulnerability in PINPOINT.WORLD Pinpoint Booking System allows…
6.5
Medium
CVE-2023-45270
Cross-Site Request Forgery (CSRF) vulnerability in PINPOINT.WORLD Pinpoint Booking System plugin <= 2.9.9.4.0 versions
4.3
Medium
CVE-2023-25062
Auth
5.9
Medium