Description (CNA)
Blitar Tourism 1.0 contains an authentication bypass vulnerability that allows attackers to bypass login by injecting SQL code through the username parameter. Attackers can manipulate the login request by sending a crafted username with SQL injection techniques to gain unauthorized administrative access.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| satndy / Aplikasi-Biro-Travel | affected 1.0 |
CWE
CWE-89
References
- https://www.exploit-db.com/exploits/49759
- https://github.com/satndy/Aplikasi-Biro-Travel
- https://www.vulncheck.com/advisories/blitar-tourism-authentication-bypass-sqli
ADP enrichment
No English description supplied.
No references supplied.