Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Salon Booking System Salon booking system allows SQL Injection.This issue affects Salon booking system: from n/a through 10.7.
History

Fri, 13 Sep 2024 21:30:00 +0000

Type Values Removed Values Added
First Time appeared Salonbookingsystem
Salonbookingsystem salon Booking System
CPEs cpe:2.3:a:salonbookingsystem:salon_booking_system:*:*:*:*:*:wordpress:*:*
Vendors & Products Salonbookingsystem
Salonbookingsystem salon Booking System

Thu, 29 Aug 2024 20:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Thu, 29 Aug 2024 15:00:00 +0000

Type Values Removed Values Added
Description Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Salon Booking System Salon booking system allows SQL Injection.This issue affects Salon booking system: from n/a through 10.7.
Title WordPress Salon Booking System plugin <= 10.7 - Authenticated SQL Injection vulnerability
Weaknesses CWE-89
References
Metrics cvssV3_1

{'score': 7.6, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L'}


cve-icon MITRE

Status: PUBLISHED

Assigner: Patchstack

Published: 2024-08-29T14:42:19.396Z

Updated: 2024-08-29T15:41:14.948Z

Reserved: 2024-06-26T21:19:06.155Z

Link: CVE-2024-39658

cve-icon Vulnrichment

Updated: 2024-08-29T15:41:11.410Z

cve-icon NVD

Status : Analyzed

Published: 2024-08-29T15:15:27.493

Modified: 2024-09-13T21:04:24.760

Link: CVE-2024-39658

cve-icon Redhat

No data.