CVE-2023-2619

A vulnerability, which was classified as critical, was found in SourceCodester Online Tours & Travels Management System 1.0. This affects the function exec of the file disapprove_delete.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-228549 was assigned to this vulnerability.

• CWE-89

• https://blog.csdn.net/weixin_43864034/article/details/130596916Exploit
• https://vuldb.com/?ctiid.228549Third Party Advisory
• https://vuldb.com/?id.228549Third Party Advisory
• https://blog.csdn.net/weixin_43864034/article/details/130596916Exploit
• https://vuldb.com/?ctiid.228549Third Party Advisory
• https://vuldb.com/?id.228549Third Party Advisory

Published

May 10, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-26157Versions of the package libredwg before 0.12.5.6384 are vuln…7.5
• CVE-2023-26158All versions of the package mockjs are vulnerable to Prototy…8.2
• CVE-2023-26159Versions of the package follow-redirects before 1.15.4 are v…6.1
• CVE-2023-2616Cross-site Scripting (XSS) - Generic in GitHub repository pi…5.4
• CVE-2023-2617A vulnerability classified as problematic was found in OpenC…7.5
• CVE-2023-2618A vulnerability, which was classified as problematic, has be…7.5
• CVE-2023-2620An issue has been discovered in GitLab CE/EE affecting all v…3.8
• CVE-2023-26203A use of hard-coded credentials vulnerability [CWE-798] in F…7.8
• CVE-2023-26204A plaintext storage of a password vulnerability [CWE-256] in…9.8
• CVE-2023-26205An improper access control vulnerability [CWE-284] in FortiA…8.8
• CVE-2023-26206An improper neutralization of input during web page generati…6.1
• CVE-2023-26207An insertion of sensitive information into log file vulnerab…6.5