critical9.8
CVE-2020-23980
DesignMasterEvents Conference management 1.0.0 allows SQL Injection via the username field on the administrator login page.
Impact
DesignMasterEvents Conference management 1.0.0 allows SQL Injection via the username field on the administrator login page.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Designmasterevents | Conference Management | Version 1.0.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://cxsecurity.com/issue/WLB-2020030177
- https://packetstormsecurity.com/files/156959/DesignMasterEvents-CMS-1.0-SQL-Injection-Cross-Site-Scripting.html
- https://cxsecurity.com/issue/WLB-2020030177
- https://packetstormsecurity.com/files/156959/DesignMasterEvents-CMS-1.0-SQL-Injection-Cross-Site-Scripting.html