CVE-2023-4866

CVSS 3.1 Score 6.3 of 10 (medium)

Details

Published Sep 10, 2023
Updated: May 17, 2024
CWE ID 89

Summary

CVE-2023-4866 is a critical vulnerability found in SourceCodester Online Tours & Travels Management System 1.0. It is classified as a SQL injection vulnerability and affects the function exec of the file booking.php. The manipulation of the argument id can lead to remote code execution. The exploit has been disclosed publicly, posing a potential danger to organizations using this system. Remediation for this vulnerability should include patching or updating the affected software to a secure version as soon as possible.

Share

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-4866 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options