Kashipara

Travel Website

6 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2023-50864

Exploit
  • EPSS 0.07%
  • Veröffentlicht 04.01.2024 15:15:10
  • Zuletzt bearbeitet 21.11.2024 08:37:26

Travel Website v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'hotelId' parameter of the hotelDetails.php resource does not validate the characters received and they are sent unfiltered to the database.

9.8

CVE-2023-50865

Exploit
  • EPSS 0.07%
  • Veröffentlicht 04.01.2024 15:15:10
  • Zuletzt bearbeitet 21.11.2024 08:37:26

Travel Website v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'city' parameter of the hotelSearch.php resource does not validate the characters received and they are sent unfiltered to the database.

9.8

CVE-2023-50866

Exploit
  • EPSS 0.07%
  • Veröffentlicht 04.01.2024 15:15:10
  • Zuletzt bearbeitet 21.11.2024 08:37:26

Travel Website v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the loginAction.php resource does not validate the characters received and they are sent unfiltered to the database.

9.8

CVE-2023-50867

Exploit
  • EPSS 0.07%
  • Veröffentlicht 04.01.2024 15:15:10
  • Zuletzt bearbeitet 21.11.2024 08:37:26

Travel Website v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the signupAction.php resource does not validate the characters received and they are sent unfiltered to the database.

9.8

CVE-2023-50862

Exploit
  • EPSS 0.07%
  • Veröffentlicht 04.01.2024 15:15:09
  • Zuletzt bearbeitet 21.11.2024 08:37:25

Travel Website v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'hotelIDHidden' parameter of the booking.php resource does not validate the characters received and they are sent unfiltered to the database.

9.8

CVE-2023-50863

Exploit
  • EPSS 0.07%
  • Veröffentlicht 04.01.2024 15:15:09
  • Zuletzt bearbeitet 21.11.2024 08:37:26

Travel Website v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'hotelIDHidden' parameter of the generateReceipt.php resource does not validate the characters received and they are sent unfiltered to the database.