CVE-2023-0515

SourceCodester Online Tours & Travels Management System 1.0 has a SQL injection vulnerability in the admin/forget_password.php handling of the email parameter. The issue is exploitable and was publicly disclosed (VDB-219335). Root cause is improper handling/manipulation of the email argument lead...