CVE-2023-0561

A vulnerability, which was classified as critical, was found in SourceCodester Online Tours & Travels Management System 1.0. Affected is an unknown function of the file /user/s.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-219702 is the identifier assigned to this vulnerability.

• CWE-89

• https://github.com/linmoren/online-tours-travels-management-system/blob/main/_user_s_id.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.219702Permissions Required, Third Party Advisory
• https://vuldb.com/?id.219702Third Party Advisory
• https://github.com/linmoren/online-tours-travels-management-system/blob/main/_user_s_id.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.219702Permissions Required, Third Party Advisory
• https://vuldb.com/?id.219702Third Party Advisory

Published

Jan 28, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-0555The Quick Restaurant Menu plugin for WordPress is vulnerable…8.1
• CVE-2023-0556The ContentStudio plugin for WordPress is vulnerable to auth…6.5
• CVE-2023-0557The ContentStudio plugin for WordPress is vulnerable to Sens…5.3
• CVE-2023-0558The ContentStudio plugin for WordPress is vulnerable to auth…9.8
• CVE-2023-0559The GS Portfolio for Envato WordPress plugin before 1.4.0 do…5.4
• CVE-2023-0560A vulnerability, which was classified as critical, has been …7.2
• CVE-2023-0562A vulnerability was found in PHPGurukul Bank Locker Manageme…9.8
• CVE-2023-0563A vulnerability classified as problematic has been found in …4.8
• CVE-2023-0564Weak Password Requirements in GitHub repository froxlor/frox…7.5
• CVE-2023-0565Business Logic Errors in GitHub repository froxlor/froxlor p…4.9
• CVE-2023-0566Improper Neutralization of Input During Web Page Generation …4.8
• CVE-2023-0567In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X be…6.2