CVE-2023-4866

Summary

CVE-2023-4866 is a critical vulnerability identified in SourceCodester Online Tours & Travels Management System 1.0. This issue affects the exec function in the booking.php file, allowing for sql injection attacks. By manipulating the id argument, an attacker can gain unauthorized access to sensitive data or even execute malicious code. The vulnerability can be exploited remotely, and the exploit has been made public. The associated identifier for this issue is VDB-239351.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.