CVE-2023-50867

Summary

CVE-2023-50867 is a vulnerability affecting Travel Website v1.0. This issue allows for unauthenticated SQL injection attacks due to insufficient input validation. Specifically, the 'username' parameter in the signupAction.php resource does not filter user input, allowing malicious characters to be directly sent to the database. This vulnerability can lead to unauthorized access, data theft, or even complete system compromise. Users are advised to update their website to the latest version or implement input validation filters to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.