CVE-2024-3350: SourceCodester Aplaya Beach Resort Online Reservation System index.php sql injection
A vulnerability, which was classified as critical, has been found in SourceCodester Aplaya Beach Resort Online Reservation System 1.0. Affected by this issue is some unknown functionality of the file admin/modroom/index.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-259454 is the identifier assigned to this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-3350?
CVE-2024-3350 is classified as a critical vulnerability in the SourceCodester Aplaya Beach Resort Online Reservation System.
How does the CVE-2024-3350 vulnerability occur?
CVE-2024-3350 occurs due to SQL injection through the manipulation of the 'id' argument in the admin/mod_room/index.php file.
What systems are affected by CVE-2024-3350?
CVE-2024-3350 affects version 1.0 of the SourceCodester Aplaya Beach Resort Online Reservation System.
How can I fix CVE-2024-3350?
To fix CVE-2024-3350, sanitize and validate all user inputs, particularly those affecting database queries, to prevent SQL injection.
What is the impact of CVE-2024-3350?
The impact of CVE-2024-3350 includes potential unauthorized access to the database and manipulation of sensitive data.