CVE-2019-8393
17.02.2019, 15:29
Hotels_Server through 2018-11-05 has SQL Injection via the API because the controller/api/login.php telephone parameter is mishandled.
Vendor | Product | Version |
---|---|---|
hotels_server_project | hotels_server | 𝑥 ≤ 2018-11-05 |
𝑥
= Vulnerable software versions