https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-05T04:47:16.721734+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2023-50862 CVE-2023-50862 — Travel Website v1.0 - Multiple Unauthenticated SQL Injections (SQLi) 2026-10-05T04:47:16.736331+00:00

Affected: Kashipara Group Travel Website

Travel Website v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'hotelIDHidden' parameter of the booking.php resource does not validate the characters received and they are sent unfiltered to the database.