Sql injection

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0 and classified as critical. This issue affects some unknown processing of the file admin/forgetpassword.php of the component Parameter Handler. The manipulation of the argument email leads to sql injection. T...

CVE-2023-0515

SourceCodester Online Tours & Travels Management System 1.0 has a SQL injection vulnerability in the admin/forget_password.php handling of the email parameter. The issue is exploitable and was publicly disclosed (VDB-219335). Root cause is improper handling/manipulation of the email argument lead...