CVE-2020-28073: SQL Injection
Published Dec 23, 2020
·Updated
SourceCodester Library Management System 1.0 is affected by SQL Injection allowing an attacker to bypass the user authentication and impersonate any user on the system.
Affected Software
1 affected component
Library Management System Project Library Management System=1.0
Event History
Dec 23, 2020
CVE Published
via MITRE·05:54 PM
Data Sourced
via MITRE·05:54 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2020-28073?
CVE-2020-28073 has been classified as a high severity vulnerability due to the impact on user authentication.
2
How do I fix CVE-2020-28073?
To fix CVE-2020-28073, ensure that user input is properly sanitized and parameterized queries are used to avoid SQL injection.
3
What impact does CVE-2020-28073 have on systems?
CVE-2020-28073 allows an attacker to bypass user authentication, potentially leading to unauthorized access to the system.
4
Which versions are affected by CVE-2020-28073?
CVE-2020-28073 affects Library Management System version 1.0.
5
Are there any known exploits for CVE-2020-28073?
Yes, proof-of-concept exploits for CVE-2020-28073 are publicly available, demonstrating the SQL injection vulnerability.