8.5
Élevée
CVE-2024-53815 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in DOTonPAPER…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in DOTonPAPER Pinpoint Booking System booking-system allows Blind SQL Injection.This issue affects Pinpoint Booking System: from n/a through <= 2.9.9.5.1.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Pinpoint Booking System 2.9 | premières → 2.9.9.5.1 | Pas de correctif indiqué |
| pinpoint_booking_system 2.9 | premières → 2.9.9.5.1 | Pas de correctif indiqué |
| Pinpoint Booking System 2.9 | premières → 2.9.9.5.1 | Pas de correctif indiqué |
Autres CVE de Pinpoint Booking System
Les 5 CVE de Pinpoint Booking System →
CVE-2024-49304
Cross-Site Request Forgery (CSRF) vulnerability in DOTonPAPER Pinpoint Booking System booking-system allows Stored…
5.4
Moyenne
CVE-2023-38520
External Control of Assumed-Immutable Web Parameter vulnerability in PINPOINT.WORLD Pinpoint Booking System allows…
6.5
Moyenne
CVE-2023-45270
Cross-Site Request Forgery (CSRF) vulnerability in PINPOINT.WORLD Pinpoint Booking System plugin <= 2.9.9.4.0 versions
4.3
Moyenne
CVE-2023-25062
Auth
5.9
Moyenne