CVE-2023-0530

SourceCodester Online Tours & Travels Management System 1.0 contains a SQL injection in admin/approve_user.php via the id parameter. This can be exploited remotely; exploitation has been disclosed publicly. Affected component is the file that handles user approval, with impact described as high c...