CVE-2024-48411: SQL Injection
itsourcecode Online Tours and Travels Management System v1.0 is vulnerable to SQL Injection (SQLI) via a crafted payload to the val-email parameter in forgetpassword.php.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-48411?
CVE-2024-48411 is classified as a high-severity vulnerability due to its potential to allow SQL Injection attacks.
How does CVE-2024-48411 exploit the Online Tours and Travels Management System?
CVE-2024-48411 exploits the Online Tours and Travels Management System by sending a crafted payload to the val-email parameter in forget_password.php.
What versions of the Online Tours and Travels Management System are affected by CVE-2024-48411?
CVE-2024-48411 affects version 1.0 of the Online Tours and Travels Management System by itsourcecode.
What are the potential impacts of CVE-2024-48411 on the affected system?
The impact of CVE-2024-48411 includes unauthorized access to the database and potential exposure of sensitive information.
How can I remediate CVE-2024-48411 in my application?
To remediate CVE-2024-48411, validate and sanitize user inputs in the affected parameters to prevent SQL Injection.