CVE-2024-0359: code-projects Simple Online Hotel Reservation System login.php sql injection

Published Jan 10, 2024

Updated

A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file login.php. The manipulation of the argument username/password leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-250126 is the identifier assigned to this vulnerability.

Affected Software

1 affected component

Code-projects Simple Online Hotel Reservation System=1.0

Event History

Jan 10, 2024

CVE Published

via MITRE·01:31 AM

Data Sourced

via MITRE·01:31 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-0359?

CVE-2024-0359 is declared as a critical vulnerability.

What type of vulnerability is CVE-2024-0359?

CVE-2024-0359 is an SQL injection vulnerability found in the login.php file.

How does CVE-2024-0359 affect the application?

CVE-2024-0359 allows remote attackers to manipulate the username/password arguments, leading to potential database exposure.

Which software version is affected by CVE-2024-0359?

CVE-2024-0359 affects version 1.0 of the Simple Online Hotel Reservation System.

How do I fix CVE-2024-0359?

Fixing CVE-2024-0359 involves sanitizing and validating user inputs in the login.php code to prevent SQL injection.