CVE-2019-8393

The CVE-2019-8393 entry describes a SQL injection in Hotels_Server (up to 2018-11-05) via the API, caused by mishandling of the telephone parameter in controller/api/login.php. Relevant details from the connected data indicate the vulnerability affects the API layer, with potential impact across ...