| Название | Campcodes Online Flight Booking Management System 1.0 SQL Injection |
|---|
| Описание | A SQL injection vulnerability has been identified in the "flights.php" file in the "Online Flight Booking Management System" project. The issue is caused due to an attacker being able to inject malicious code via the parameter "departure_airport_id", which is used directly in SQL queries without proper sanitization or validation. This allows an attacker to spoof input values to manipulate SQL queries and perform unauthorized operations. |
|---|
| Источник | ⚠️ https://www.yuque.com/yuqueyonghuvrsrwv/dhlxlu/xsngklzdixvub9si?singleDoc |
|---|
| Пользователь | XenoEcho (UID 87913) |
|---|
| Представление | 03.08.2025 14:56 (1 Год назад) |
|---|
| Модерация | 13.08.2025 16:11 (10 days later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 319926 [Campcodes Online Flight Booking Management System 1.0 /flights.php departure_airport_id SQL-инъекция] |
|---|
| Баллы | 20 |
|---|