Travel Website v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the signupAction.php resource does not validate the characters received and they are sent unfiltered to the database.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: Fluid Attacks
Published: 2024-01-04T14:33:52.582Z
Updated: 2024-08-02T22:23:44.024Z
Reserved: 2023-12-14T17:47:18.224Z
Link: CVE-2023-50867
Vulnrichment
No data.
NVD
Status : Modified
Published: 2024-01-04T15:15:10.623
Modified: 2024-11-21T08:37:26.547
Link: CVE-2023-50867
Redhat
No data.