CVEvulnerability
CVE-2023-34487
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2023-06-29
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-89
Description
itsourcecode Online Hotel Management System Project In PHP v1.0.0 is vulnerable to SQL Injection. SQL injection points exist in the login password input box. This vulnerability can be exploited through time-based blind injection.
Affected configurations
• online hotel management system project online hotel management system 1.0.0
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- https://github.com/JunyanYip/itsourcecode_justines_sql_vul Exploit, Third Party Advisory
- https://github.com/JunyanYip/itsourcecode_justines_sql_vul Exploit, Third Party Advisory