3 matches found
CVE-2023-50867 Travel Website v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
Travel Website v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the signupAction.php resource does not validate the characters received and they are sent unfiltered to the database...
PT-2024-13984
Name of the Vulnerable Software and Affected Versions Travel Website version 1.0 Description The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. Specifically, the username parameter of the "signupAction.php" resource does not validate the characters received, and they are...
CVE-2023-50867: Improper Neutralization of Special Elements used in an SQL Command
Travel Website v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the signupAction.php resource does not validate the characters received and they are sent unfiltered to the database...