CVE Catalog

CVE-2017-17584

Critical
Published: Translated: NVD NIST

Summary

FS Makemytrip Clone version 1.0 has a SQL Injection vulnerability via the fl_orig or fl_dest parameters in the show-flight-result.php file.

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized access to the database, threatening the integrity and confidentiality of the organization's data.

Recommendation

It is recommended to update to the latest version of the software and implement input filtering and validation.

Original NVD description (English source)

FS Makemytrip Clone 1.0 has SQL Injection via the show-flight-result.php fl_orig or fl_dest parameter.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS