CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L
What the vulnerability does
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Salon Booking System Salon booking system allows SQL Injection.This issue affects Salon booking system: from n/a through 10.7.
Explanation of Vulnerability in Simple Terms
A SQL injection vulnerability in Salon Booking System versions up to 10.7 allows authenticated administrators to read sensitive database information. An attacker with high-level privileges can craft malicious SQL queries through the application. The vulnerability affects database confidentiality and may impact system availability. Update to a version newer than 10.7 to remediate.
What an attacker can do
Read sensitive data from the database and potentially degrade system availability.
Potential impact on your site
Administrators with compromised credentials could expose customer data and booking records stored in the database.
Conditions required to exploit
Attacker must have administrator-level access to the Salon Booking System.
Key dates
External resources
Related vulnerabilities
