top of page
perceptive_background_267k.jpg

Fishing Reservation System 7.5 contains multiple remote SQL injection vulnerabilities in admin.php, cart.php, and calendar.php that allow attackers to inject ma…

Published:

2 February 2026 at 23:00:00

Alert date:

3 February 2026 at 23:08:48

Source:

nvd.nist.gov

Click to open the original link from this advisory

Web Technologies, Database & Storage

CVE-2020-37081 affects Fishing Reservation System version 7.5 with multiple remote SQL injection vulnerabilities. The vulnerabilities are located in three key files: admin.php, cart.php, and calendar.php. Attackers can exploit vulnerable parameters including uid, pid, type, m, y, and code to inject malicious SQL commands. The attack allows compromise of the database management system and web application. No user interaction is required for successful exploitation, making this a critical remote vulnerability.

Technical details

Mitigation steps:

Affected products:

Fishing Reservation System 7.5

Related links:

Related CVE's:

Related threat actors:

IOC's:

This article was created with the assistance of AI technology by Perceptive.

© 2025 by Perceptive Security. All rights reserved.

email: info@perceptivesecurity.com

Disclaimer: Deze website toont informatie afkomstig van externe bronnen. Perceptive aanvaardt geen verantwoordelijkheid voor de inhoud, juistheid of volledigheid van deze informatie.

bottom of page