First published: Fri Apr 05 2024(Updated: )
A vulnerability, which was classified as critical, has been found in SourceCodester Aplaya Beach Resort Online Reservation System 1.0. Affected by this issue is some unknown functionality of the file admin/mod_room/index.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-259454 is the identifier assigned to this vulnerability.
Credit: cna@vuldb.com
Affected Software | Affected Version | How to fix |
---|---|---|
Janobe Aplaya Beach Resort Online Reservation System | =1.0 | |
Janobe Aplaya Beach Resort Online Reservation System |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2024-3350 is classified as a critical vulnerability in the SourceCodester Aplaya Beach Resort Online Reservation System.
CVE-2024-3350 occurs due to SQL injection through the manipulation of the 'id' argument in the admin/mod_room/index.php file.
CVE-2024-3350 affects version 1.0 of the SourceCodester Aplaya Beach Resort Online Reservation System.
To fix CVE-2024-3350, sanitize and validate all user inputs, particularly those affecting database queries, to prevent SQL injection.
The impact of CVE-2024-3350 includes potential unauthorized access to the database and manipulation of sensitive data.