CVE-2023-4866

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0 and classified as critical. This issue affects the function exec of the file booking.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-239351.

• CWE-89
• CWE-89

• https://blog.csdn.net/weixin_43864034/article/details/132697070Exploit, Third Party Advisory
• https://vuldb.com/?ctiid.239351Permissions Required, Third Party Advisory
• https://vuldb.com/?id.239351Third Party Advisory
• https://blog.csdn.net/weixin_43864034/article/details/132697070Exploit, Third Party Advisory
• https://vuldb.com/?ctiid.239351Permissions Required, Third Party Advisory
• https://vuldb.com/?id.239351Third Party Advisory

Published

Sep 10, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-48654One Identity Password Manager before 5.13.1 allows Kiosk Esc…9.8
• CVE-2023-48655An issue was discovered in MISP before 2.4.176. app/Controll…9.8
• CVE-2023-48656An issue was discovered in MISP before 2.4.176. app/Model/Ap…9.8
• CVE-2023-48657An issue was discovered in MISP before 2.4.176. app/Model/Ap…9.8
• CVE-2023-48658An issue was discovered in MISP before 2.4.176. app/Model/Ap…9.8
• CVE-2023-48659An issue was discovered in MISP before 2.4.176. app/Controll…9.8
• CVE-2023-48660 Dell vApp Manger, versions prior to 9.2.4.x contain an arbi…7.5
• CVE-2023-48661 Dell vApp Manager, versions prior to 9.2.4.x contain an arb…4.9
• CVE-2023-48662 Dell vApp Manager, versions prior to 9.2.4.x contain a comm…7.2
• CVE-2023-48663 Dell vApp Manager, versions prior to 9.2.4.x contain a comm…7.2
• CVE-2023-48664 Dell vApp Manager, versions prior to 9.2.4.x contain a comm…7.2
• CVE-2023-48665 Dell vApp Manager, versions prior to 9.2.4.x contain a comm…7.2