SourceCodester Online Flight Booking Management System POST Parameter review_search.php sql injection
CVE-2023-0283
What is CVE-2023-0283?
A SQL injection vulnerability has been discovered in the SourceCodester Online Flight Booking Management System, specifically within the review_search.php file related to the POST Parameter Handler. By manipulating the txtsearch argument, an attacker can exploit this vulnerability remotely, allowing them to execute unauthorized SQL queries. This loophole exposes sensitive data and enables a full compromise of the database. The potential for exploitation has been publicly disclosed, thus raising concerns for users and administrators of the affected system.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Online Flight Booking Management System
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved
