CVE-2019-8393: Improper Neutralization of Special Elements used in an SQL Command

HotelsServer through 2018-11-05 has SQL Injection via the API because the controller/api/login.php telephone parameter is mishandled...

PT-2019-19008

Name of the Vulnerable Software and Affected Versions Hotels Server versions prior to 2018-11-05 Description The issue is related to SQL Injection, which occurs due to the mishandling of the telephone parameter in the "controller/api/login.php" API endpoint. This allows for potential exploitation...