Description (CNA)
A vulnerability was found in propanetank Roommate-Bill-Tracking up to 288437f658fc9ee7d4b92a9da12557024d8bc55c. It has been declared as critical. This vulnerability affects unknown code of the file /includes/login.php. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. The name of the patch is b32bb1b940f82d38fb9310cd66ebe349e20a1d0a. It is recommended to apply a patch to fix this issue.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| propanetank / Roommate-Bill-Tracking | affected 288437f658fc9ee7d4b92a9da12557024d8bc55c |
CWE
CWE-89, CWE-74
References
- https://vuldb.com/?id.303640
- https://vuldb.com/?ctiid.303640
- https://github.com/propanetank/Roommate-Bill-Tracking/commit/b32bb1b940f82d38fb9310cd66ebe349e20a1d0a
ADP enrichment
No English description supplied.
No references supplied.