CVE-2024-2531: Unrestricted Upload of File with Dangerous Type

A vulnerability classified as critical has been found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. Affected is an unknown function of the file /admin/update-rooms.php. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has...

CVE-2024-2528: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/update-rooms.php. The manipulation of the argument roomid leads to sql injection. It is possible to initiate the attack...

PT-2024-20856

Name of the Vulnerable Software and Affected Versions MAGESH-K21 Online-College-Event-Hall-Reservation-System version 1.0 Description A critical issue was found in the system, affecting an unknown part of the file /admin/update-rooms.php. The manipulation of the room id argument leads to SQL...

PT-2024-20869

Name of the Vulnerable Software and Affected Versions MAGESH-K21 Online-College-Event-Hall-Reservation-System version 1.0 Description A vulnerability was found in the system, affecting the processing of the file /admin/update-rooms.php. The manipulation of the id argument leads to cross-site...

PT-2024-20879

Name of the Vulnerable Software and Affected Versions MAGESH-K21 Online-College-Event-Hall-Reservation-System version 1.0 Description A critical vulnerability has been found in the system, affecting an unknown function of the file /admin/update-rooms.php. The manipulation leads to unrestricted...