CVE-2023-0324: falha de alta gravidade em SourceCodester Online Tours & Travels…
SourceCodester Online Tours & Travels Management System page-login.php sql injection
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
26Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.3epss 19%
A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file admin/page-login.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-218426 is the identifier assigned to this vulnerability.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Produtos afetados
SourceCodester · Online Tours & Travels Management SystemCVEs relacionadas — SourceCodester Online Tours & Travels…
No mesmo produto, das mais perigosas para as menos.
CVE-2023-0516MEDIUMSourceCodester Online Tours & Travels Management System Parameter forget_password.php sql injectionEPSS 1.1%CVE-2023-0515MEDIUMSourceCodester Online Tours & Travels Management System Parameter forget_password.php sql injectionEPSS 1.1%CVE-2023-1590MEDIUMSourceCodester Online Tours & Travels Management System currency.php exec sql injectionEPSS 0.8%CVE-2023-1589MEDIUMSourceCodester Online Tours & Travels Management System approve_delete.php exec sql injectionEPSS 0.8%CVE-2023-4866MEDIUMSourceCodester Online Tours & Travels Management System booking.php exec sql injectionEPSS 0.7%CVE-2023-6765MEDIUMSourceCodester Online Tours & Travels Management System email_setup.php prepare sql injectionEPSS 0.7%