SourceCodester Online Flight Booking Management System POST Parameter review_search.php sql injection

CVE-2023-0283

What is CVE-2023-0283?

A SQL injection vulnerability has been discovered in the SourceCodester Online Flight Booking Management System, specifically within the review_search.php file related to the POST Parameter Handler. By manipulating the txtsearch argument, an attacker can exploit this vulnerability remotely, allowing them to execute unauthorized SQL queries. This loophole exposes sensitive data and enables a full compromise of the database. The potential for exploitation has been publicly disclosed, thus raising concerns for users and administrators of the affected system.

References