CVE-2020-28133

An issue was discovered in SourceCodester Simple Grocery Store Sales And Inventory System 1.0. There was authentication bypass in web login functionality allows an attacker to gain client privileges via SQL injection in sales_inventory/login.php.

CVSS v3.1

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

2.11% chance of exploitation in the next 30 days, 80th percentile

Published

2020-11-17

Updated

2024-08-04

Proof-of-concept exploits (1)

• https://www.exploit-db.com/exploits/48879

References

• CVE Record
• NVD entry

Related

• CVE-2020-28130
• CVE-2020-28136
• CVE-2020-28129
• CVE-2020-28137
• CVE-2020-28119
• CVE-2020-28138