vendor:
Seat Reservation System
by:
Augkim
8.8
CVSS
HIGH
SQL Injection
89
CWE
Product Name: Seat Reservation System
Affected Version From: 1.0
Affected Version To: 1.0
Patch Exists: NO
Related CWE: N/A
CPE: a:sourcecodester:seat_reservation_system_using_php:1.0
Metasploit:
N/A
Other Scripts:
N/A
Platforms Tested: Apache2
2020
Seat Reservation System 1.0 – ‘id’ SQL Injection
An SQL injection vulnerability exists in the Seat Reservation System 1.0 web application. An attacker can send a specially crafted HTTP POST request to the vulnerable application to inject malicious SQL queries into the application. This can be exploited to gain access to sensitive information from the database.
Mitigation:
Input validation should be used to prevent SQL injection attacks. All user-supplied input should be validated and filtered before being used in SQL queries.
