by Kastro
Paper/Archive/CVE-2023-34487

CVE-2023-34487

mitre — itsourcecode Online Hotel Management System Project In PHP v1.0.0 is vulnerable to SQL Injection.

EPSS 0.9%public exploitCVSS 9.8
critical.is priorityof 100
51
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 58.4.584 × 2011.7Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

itsourcecode Online Hotel Management System Project In PHP v1.0.0 is vulnerable to SQL Injection. SQL injection points exist in the login password input box. This vulnerability can be exploited through time-based blind injection.

Affected

ProductAffectedFixed inSource
n/an/a–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total

References

refgithub.com/JunyanYip/itsourcecode_justines_sql_vul