CVE-2024-6308
itsourcecode Simple Online Hotel Reservation System index.php sql injection
- State
- Published
- Severity
- 6.9 Medium
- Published
- Jun 25, 2024
- Updated
- Aug 1, 2024
- Reserved
- Jun 25, 2024
Description
A vulnerability was found in itsourcecode Simple Online Hotel Reservation System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file index.php. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-269620.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 6.9 Medium | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N | VulDB |
| 3.1 | 7.3 High | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L | VulDB |
| 3.0 | 7.3 High | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L | VulDB |
| 2.0 | 7.5 High | AV:N/AC:L/Au:N/C:P/I:P/A:P | VulDB |
Weaknesses
- CWE-89 SQL Injection
Affected Products
| Product | Versions |
|---|---|
Simple Online Hotel Reservation Systemitsourcecode |
|
References
- VDB-269620 | itsourcecode Simple Online Hotel Reservation System index.php sql injectionvdb-entrytechnical-description
- VDB-269620 | CTI Indicators (IOB, IOC, TTP, IOA)signaturepermissions-required
- Submit #363955 | itsourcecode Simple Online Hotel Reservation System in PHP Project With Source Code V1.0 SQL Injectionthird-party-advisory
- https://github.com/L1OudFd8cl09/CVE/blob/main/25_06_2024_a.mdexploit
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.