CVE-2022-2673 — Rigatur Online Booking and Hotel Management System POST Request login.php sql injection

CVE-2022-2673

Rigatur Online Booking and Hotel Management System POST Request login.php sql injection PUBLISHED

Description (CNA)

A vulnerability was found in Rigatur Online Booking and Hotel Management System aff6409. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file login.php of the component POST Request Handler. The manipulation of the argument email/pass leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-205657 was assigned to this vulnerability.

Affected (CNA)

Vendor / product	Versions
Rigatur / Online Booking and Hotel Management System	affected aff6409

CWE

CWE-89

References

https://vuldb.com/?id.205657

ADP enrichment

CVE

No English description supplied.

https://vuldb.com/?id.205657

CISA-ADP

No English description supplied.

No references supplied.