critical9.8
CVE-2024-33965
SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0.
Impact
SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'view' in '/tubigangarden/admin/mod_accomodation/index.php' parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Janobe | Credit Card | Version 1.0 |
| Janobe | Debit Card Payment | Version 1.0 |
| Janobe | Paypal | Version 1.0 |
| Janobe | School Attendence Monitoring System | Version 1.0 |
| Janobe | School Event Management System | Version 1.0 |