CVE-2023-34487
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk49th percentile - higher than 49% of all known CVEs
Summary
The Online Hotel Management System Project in PHP version 1.0.0 is vulnerable to SQL Injection. This vulnerability exists in the login password input box and can be exploited through time-based blind injection.
Risk Assessment
Exploitation of this vulnerability may lead to unauthorized access to user data and the database, posing a serious threat to information security within the organization.
Recommendation
It is recommended to update the system to the latest version and implement security mechanisms against SQL Injection attacks, such as using prepared statements.
Original NVD description (English source)
itsourcecode Online Hotel Management System Project In PHP v1.0.0 is vulnerable to SQL Injection. SQL injection points exist in the login password input box. This vulnerability can be exploited through time-based blind injection.