Kashipara Group Travel Website
6 CVEs affecting Kashipara Group Travel Website. Latest disclosed: 2024-01-04. Critical: 6, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-50867 | Critical | 9.8 | 2024-01-04 | Travel Website v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the signupAction.php resource does not… |
CVE-2023-50866 | Critical | 9.8 | 2024-01-04 | Travel Website v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the loginAction.php resource does not… |
CVE-2023-50865 | Critical | 9.8 | 2024-01-04 | Travel Website v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'city' parameter of the hotelSearch.php resource does not vali… |
CVE-2023-50864 | Critical | 9.8 | 2024-01-04 | Travel Website v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'hotelId' parameter of the hotelDetails.php resource does not… |
CVE-2023-50863 | Critical | 9.8 | 2024-01-04 | Travel Website v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'hotelIDHidden' parameter of the generateReceipt.php resource… |
CVE-2023-50862 | Critical | 9.8 | 2024-01-04 | Travel Website v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'hotelIDHidden' parameter of the booking.php resource does not… |