Vulnerability · Published Feb 3, 2026 · Assigned by VulnCheck

CVE-2020-37081Fishing Reservation System 7.5 - 'uid' SQL Injection

High 7.1

In plain English

A high-severity SQL injection in Fishing Reservation System from Fishing Reservation System. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 15% of all known vulnerabilities).

Severity (CVSS 3.1)7.1High

Exploit odds (30 days)0.2%top 84.6% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

Fishing Reservation System 7.5 contains multiple remote SQL injection vulnerabilities in admin.php, cart.php, and calendar.php that allow attackers to inject malicious SQL commands. Attackers can exploit vulnerable parameters like uid, pid, type, m, y, and code to compromise the database management system and web application without user interaction.

Affected products (as reported)

Vendor	Product	Versions
Fishing Reservation System	Fishing Reservation System	7.5

Weakness: CWE-89 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N

References

ExploitDB-48417 exploit
Vulnerability-Lab Researcher Disclosure technical-description, exploit
Fishing Reservation System Homepage product
VulnCheck Advisory: Fishing Reservation System 7.5 - 'uid' SQL Injection third-party-advisory