SQL Injection Vulnerability in SourceCodester Aplaya Beach Resort Online Reservation System

CVE-2024-3354

Summary

A significant vulnerability has been identified in the Aplaya Beach Resort Online Reservation System developed by SourceCodester. This issue arises from an SQL injection flaw found in the file 'admin/mod_users/index.php', where unsanitized user input is processed. The vulnerability allows remote attackers to manipulate the 'id' parameter, potentially leading to unauthorized access to the database. Given the critical nature of this flaw, it poses a serious threat as it can be exploited publicly, enabling malicious actors to execute arbitrary SQL queries. Organizations using this system must take immediate action to secure their applications against potential data breaches and unauthorized data modifications.

References