A vulnerability, which was classified as critical, has been found in SourceCodester Design and Implementation of Covid-19 Directory on Vaccination System 1.0.php. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and no vendor patch available.
PHP
SQLi
Design And Implementation Of Covid 19 Directory On Vaccination System
NVD
GitHub
VulDB
CVSS 3.1
8.1
EPSS
0.9%
HashiCorp Vault and Vault Enterprise’s approle auth method allowed any authenticated user with access to an approle destroy endpoint to destroy the secret ID of any other role by providing the secret. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Authentication Bypass
Hashicorp
Vault
NVD
CVSS 3.1
8.1
EPSS
0.6%