Lucene search
PRIOn knowledge basePRION:CVE-2023-50862HistoryJan 04, 2024 - 3:15 p.m.
Sql injection
2024-01-0415:15:00
PRIOn knowledge base
www.prio-n.com
2
sql injection
unauthenticated
travel website v1.0
booking.php
database
Travel Website v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The ‘hotelIDHidden’ parameter of the booking.php resource does not validate the characters received and they are sent unfiltered to the database.
| CPE | Name | Operator | Version |
|---|---|---|---|
| travel_website | eq | 1.0 |
