VYPR

Club Management

by Northstar

CVEs (1)

  • CVE-2022-26959CriSep 16, 2022
    risk 0.65cvss 10.0epss 0.01

    There are two full (read/write) Blind/Time-based SQL injection vulnerabilities in the Northstar Club Management version 6.3 application. The vulnerabilities exist in the userName parameter of the processlogin.jsp page in the /northstar/Portal/ directory and the userID parameter…