CVE-2023-0516: medium-severity vulnerability in SourceCodester Online Tours & Travels…
SourceCodester Online Tours & Travels Management System Parameter forget_password.php sql injection
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5.5epss 1.0%
A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been classified as critical. Affected is an unknown function of the file user/forget_password.php of the component Parameter Handler. The manipulation of the argument email leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-219336.
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Affected products
SourceCodester · Online Tours & Travels Management SystemRelated CVEs — SourceCodester Online Tours & Travels…
In the same product, most dangerous first.
CVE-2023-0324HIGHSourceCodester Online Tours & Travels Management System page-login.php sql injectionEPSS 18.8%CVE-2023-0515MEDIUMSourceCodester Online Tours & Travels Management System Parameter forget_password.php sql injectionEPSS 1.0%CVE-2023-1590MEDIUMSourceCodester Online Tours & Travels Management System currency.php exec sql injectionEPSS 0.8%CVE-2023-1589MEDIUMSourceCodester Online Tours & Travels Management System approve_delete.php exec sql injectionEPSS 0.8%CVE-2023-4866MEDIUMSourceCodester Online Tours & Travels Management System booking.php exec sql injectionEPSS 0.7%CVE-2023-6765MEDIUMSourceCodester Online Tours & Travels Management System email_setup.php prepare sql injectionEPSS 0.7%