Vulnerability Details CVE-2023-50866
Travel Website v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the loginAction.php resource does not validate the characters received and they are sent unfiltered to the database.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 47.1%
CVSS Severity
CVSS v3 Score 9.8
References
Products affected by CVE-2023-50866
-
cpe:2.3:a:kashipara:travel_website:1.0