CVE-2026-14762: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in code-projects Hotel and Tourism Reservation 1.0. The impacted element is an unknown function of the file /admin/rooms.php of the component Room Management Page. The manipulation of the argument delete results in sql injection. It is possible to launch the attack...

CVE-2024-42772: Improper Access Control

An Incorrect Access Control vulnerability was found in /admin/rooms.php in Kashipara Hotel Management System v1.0, which allows an unauthenticated attacker to view valid hotel room entries in administrator section...

PT-2024-20863

Name of the Vulnerable Software and Affected Versions MAGESH-K21 Online-College-Event-Hall-Reservation-System version 1.0 Description A critical issue affects the unknown code of the file /admin/rooms.php, leading to unrestricted upload. The attack can be initiated remotely. The exploit has been...

CVE-2024-2526: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/rooms.php. The manipulation of the argument id leads to cross site scripting. The attack can b...

PT-2024-20852

Name of the Vulnerable Software and Affected Versions MAGESH-K21 Online-College-Event-Hall-Reservation-System version 1.0 Description A critical issue was found in the system, affecting some unknown functionality of the file /admin/rooms.php. The manipulation of the room id argument leads to SQL...

PT-2024-20851

Name of the Vulnerable Software and Affected Versions MAGESH-K21 Online-College-Event-Hall-Reservation-System version 1.0 Description A vulnerability has been found in the system, classified as problematic, affecting an unknown functionality of the file /admin/rooms.php. The manipulation of the i...

CVE-2024-2529: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/rooms.php. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit has be...

CVE-2024-2527: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/rooms.php. The manipulation of the argument roomid leads to sql injection. The attack may be launched...