CVE-2023-0560

A vulnerability, which was classified as critical, has been found in SourceCodester Online Tours & Travels Management System 1.0. This issue affects some unknown processing of the file admin/practice_pdf.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-219701 was assigned to this vulnerability.

• CWE-89

• https://github.com/linmoren/online-tours-travels-management-system/blob/main/admin_practice_pdf_id.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.219701Permissions Required, Third Party Advisory
• https://vuldb.com/?id.219701Third Party Advisory
• https://github.com/linmoren/online-tours-travels-management-system/blob/main/admin_practice_pdf_id.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.219701Permissions Required, Third Party Advisory
• https://vuldb.com/?id.219701Third Party Advisory

Published

Jan 28, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-0554The Quick Restaurant Menu plugin for WordPress is vulnerable…8.1
• CVE-2023-0555The Quick Restaurant Menu plugin for WordPress is vulnerable…8.1
• CVE-2023-0556The ContentStudio plugin for WordPress is vulnerable to auth…6.5
• CVE-2023-0557The ContentStudio plugin for WordPress is vulnerable to Sens…5.3
• CVE-2023-0558The ContentStudio plugin for WordPress is vulnerable to auth…9.8
• CVE-2023-0559The GS Portfolio for Envato WordPress plugin before 1.4.0 do…5.4
• CVE-2023-0561A vulnerability, which was classified as critical, was found…8.8
• CVE-2023-0562A vulnerability was found in PHPGurukul Bank Locker Manageme…9.8
• CVE-2023-0563A vulnerability classified as problematic has been found in …4.8
• CVE-2023-0564Weak Password Requirements in GitHub repository froxlor/frox…7.5
• CVE-2023-0565Business Logic Errors in GitHub repository froxlor/froxlor p…4.9
• CVE-2023-0566Improper Neutralization of Input During Web Page Generation …4.8