Bookgy SQL Injection Vulnerability in bkg_imprimir_comprobante.php

A SQL injection vulnerability has been identified in Bookgy, an online booking and management software. This vulnerability allows attackers to retrieve, create, update, and delete databases by sending an HTTP request through the 'IDRESERVA' parameter in the 'bkg_imprimir_comprobante.php' file.

Impact

Exploitation of this vulnerability could lead to unauthorized database manipulation, allowing attackers to alter, delete, or extract sensitive information from the database.

Remediation

The Bookgy team has fixed this vulnerability, and it is no longer exploitable.