CVE-2020-28183 - SQL injection vulnerability in SourceCodester Water Billing System 1.0 via the username and password parameters to process.php

CRITICAL

SQL injection vulnerability in SourceCodester Water Billing System 1.0 via the username and password parameters to process.php

Published Nov 17, 2020

9.8

CRITICAL

CVSS 3.1

EPSS 2.56%

SQL injection vulnerability in SourceCodester Water Billing System 1.0 via the username and password parameters to process.php.

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-20668		Advisory
https://github.com/sartlabs/0days/tree/main/WBS		x_refsource_MISCThird Party Advisory
https://research-labs.net/search/exploits/water-billing-system-10-username-and-password-parameters-sql-injection		x_refsource_MISCBroken Link
https://www.exploit-db.com/exploits/49032		x_refsource_MISCExploitThird Party AdvisoryVDB Entry

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Nov 17, 2020

Updated Aug 4, 2024

Reserved Nov 2, 2020

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Nov 17, 2020

Updated Aug 4, 2024

GitHub

No data