Sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Online Tours & Travels Management System 1.0. This affects the function exec of the file disapprovedelete.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely...

CVE-2023-2619

CVE-2023-2619 affects SourceCodester Online Tours & Travels Management System 1.0, specifically the file disapprove_delete.php. The vulnerability arises from unsafe handling of the id parameter in the PHP code’s exec function, enabling SQL injection. Exploitation is possible remotely and has been...