CVE-2023-1589

CVE-2023-1589 affects SourceCodester Online Tours & Travels Management System v1.0. The vulnerability lies in the exec function used by admin/operations/approve_delete.php, where manipulating the id parameter enables SQL injection. Exploitation is possible remotely and has been publicly disclosed...

CVE-2023-1589 SourceCodester Online Tours & Travels Management System approve_delete.php exec sql injection

A vulnerability has been found in SourceCodester Online Tours & Travels Management System 1.0 and classified as critical. This vulnerability affects the function exec of the file admin/operations/approvedelete.php. The manipulation of the argument id leads to sql injection. The attack can be...