CVE-2023-50863

creationtimestamp| type| source ---|---|--- 2024-01-04 16:32:03+00:00| seen| https://t.me/ctinow/163084 2024-01-05 01:34:24+00:00| seen| https://t.me/cibsecurity/74420 2024-01-06 18:36:05+00:00| seen| https://t.me/arpsyndicate/2568...

CVE-2023-50863

Travel Website v1.0 contains unauthenticated SQL Injection vulnerabilities in generateReceipt.php, via unsanitized hotelIDHidden input sent to the database. Root cause: lack of input validation for hotelIDHidden leads to arbitrary SQL execution with high impact (CVSS 3.1: 9.8 CRITICAL, AV:N/AC:L/...