CVE-2023-6765: SourceCodester Online Tours & Travels Management System email_setup.php prepare sql injection
A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been rated as critical. This issue affects the function prepare of the file emailsetup.php. The manipulation of the argument name leads to sql injection. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-247895.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-6765?
CVE-2023-6765 has been rated as critical due to its potential for SQL injection.
How do I fix CVE-2023-6765?
To fix CVE-2023-6765, sanitize and validate all user inputs to prevent SQL injection.
Which software is affected by CVE-2023-6765?
CVE-2023-6765 affects SourceCodester Online Tours & Travels Management System version 1.0.
What type of vulnerability is CVE-2023-6765?
CVE-2023-6765 is an SQL injection vulnerability that can be exploited through the email_setup.php file.
What could happen if CVE-2023-6765 is exploited?
If CVE-2023-6765 is exploited, an attacker could manipulate the database through SQL injection, leading to data exposure or corruption.