Fishing Reservation System 7.5 contains multiple remote SQL injection vulnerabilities in admin.php, cart.php, and calendar.php that allow attackers to inject ma…

CVE-2020-37081 affects Fishing Reservation System version 7.5 with multiple remote SQL injection vulnerabilities. The vulnerabilities are located in three key files: admin.php, cart.php, and calendar.php. Attackers can exploit vulnerable parameters including uid, pid, type, m, y, and code to inject malicious SQL commands. The attack allows compromise of the database management system and web application. No user interaction is required for successful exploitation, making this a critical remote vulnerability.