Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Anxxc

#25016of 53,635
9.8Total CVSS
Vulnerabilities · 1
PT-2026-21246
9.8
2026-02-20
Sourcecodester · Simple Responsive Tourism Website · CVE-2026-2848
**Name of the Vulnerable Software and Affected Versions** SourceCodester Simple Responsive Tourism Website version 1.0 **Description** A flaw exists in SourceCodester Simple Responsive Tourism Website that allows for SQL injection. This issue is related to the manipulation of the `Username` argument within the `/classes/Master.php?f=register` file during the registration process. The attack can be initiated remotely. An exploit for this issue has been published. **Recommendations** Apply any available updates or patches to address the SQL injection issue in the `/classes/Master.php?f=register` file. As a temporary workaround, restrict or disable the registration functionality until a patch is available. Sanitize the `Username` input to prevent SQL injection attacks.