📦 Travel Website

by Kashipara

🔍 What is Travel Website?

Description coming soon...

🛡️ Security Overview

Click on a severity to filter vulnerabilities

⚠️ Known Vulnerabilities

CVE-2023-50864

CRITICAL CVSS 9.8 Jan 4, 2024

Travel Website v1.0 contains unauthenticated SQL injection vulnerabilities in the hotelDetails.php resource, allowing attackers to execute arbitrary SQL commands without authentication. This affects a...

CVE-2023-50866

CRITICAL CVSS 9.8 Jan 4, 2024

Travel Website v1.0 has unauthenticated SQL injection vulnerabilities in the loginAction.php file, specifically in the username parameter. Attackers can execute arbitrary SQL commands without authenti...

CVE-2023-50862

CRITICAL CVSS 9.8 Jan 4, 2024

Travel Website v1.0 contains an unauthenticated SQL injection vulnerability in the booking.php resource's hotelIDHidden parameter. Attackers can execute arbitrary SQL commands without authentication, ...