itsourcecode Online Hotel Management System Project In PHP v1.0.0 is vulnerable to SQL Injection. SQL injection points exist in the login password input box. This vulnerability can be exploited through time-based blind injection.
References
| Link | Resource |
|---|---|
| https://github.com/JunyanYip/itsourcecode_justines_sql_vul | Exploit Third Party Advisory |
| https://github.com/JunyanYip/itsourcecode_justines_sql_vul | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 08:07
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/JunyanYip/itsourcecode_justines_sql_vul - Exploit, Third Party Advisory |
06 Jul 2023, 18:31
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://github.com/JunyanYip/itsourcecode_justines_sql_vul - Exploit, Third Party Advisory | |
| First Time |
Online Hotel Management System Project online Hotel Management System
Online Hotel Management System Project |
|
| CWE | CWE-89 | |
| CPE | cpe:2.3:a:online_hotel_management_system_project:online_hotel_management_system:1.0.0:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
29 Jun 2023, 15:35
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-06-29 14:15
Updated : 2024-11-21 08:07
NVD link : CVE-2023-34487
Mitre link : CVE-2023-34487
CVE.ORG link : CVE-2023-34487
JSON object : View
Products Affected
online_hotel_management_system_project
- online_hotel_management_system
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')