PT-2023-30665 · Unknown · Restaurant Table Booking System

Serhat Çi̇çek

·

CVE-2023-48016

·

Published

2023-12-01

·

Updated

2023-12-06

CVSS v3.1

7.5

High

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Restaurant Table Booking System version 1.0
Description The issue is related to SQL Injection in the rtbs/admin/index.php file via the username parameter. This allows for potential exploitation of the system.
Recommendations For Restaurant Table Booking System version 1.0, consider restricting access to the rtbs/admin/index.php file until a patch is available, and avoid using the username parameter in this context to minimize the risk of exploitation.

Exploit

Fix

SQL injection

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2023-48016

Affected Products

Restaurant Table Booking System