69 matches found
CVE-2023-4866: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0 and classified as critical. This issue affects the function exec of the file booking.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been...
PT-2022-26460 · Unknown · Movie Ticket Booking System
Name of the Vulnerable Software and Affected Versions: Movie Ticket Booking System affected versions not specified Description: A problematic issue has been found in the Movie Ticket Booking System, affecting an unknown functionality of the file booking.php. The manipulation of the id argument...
Movie Ticket Booking System 安全漏洞
Movie Ticket Booking System is a movie ticket booking system by the individual developer Aman sharma. Movie Ticket Booking System has a security vulnerability that stems from a problem with an unknown function in the file booking.php, where manipulation of the parameter id can lead to cross-site...
CVE-2022-4250 Movie Ticket Booking System booking.php cross site scripting
A vulnerability has been found in Movie Ticket Booking System and classified as problematic. Affected by this vulnerability is an unknown functionality of the file booking.php. The manipulation of the argument id leads to cross site scripting. The attack can be launched remotely. The exploit has...
CVE-2022-4247 Movie Ticket Booking System booking.php sql injection
A vulnerability classified as critical was found in Movie Ticket Booking System. This vulnerability affects unknown code of the file booking.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may ...
CVE-2022-4247: Improper Neutralization
A vulnerability classified as critical was found in Movie Ticket Booking System. This vulnerability affects unknown code of the file booking.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may ...
CVE-2022-4250: Improper Neutralization
A vulnerability has been found in Movie Ticket Booking System and classified as problematic. Affected by this vulnerability is an unknown functionality of the file booking.php. The manipulation of the argument id leads to cross site scripting. The attack can be launched remotely. The exploit has...
Movie Ticket Booking System 安全漏洞
Movie Ticket Booking System is a movie ticket booking system by Aman sharma individual developer. Movie Ticket Booking System has a security vulnerability that stems from a problem with unknown code in the file booking.php, where manipulation of the parameter id can lead to sql injection...
CVE-2022-36544
Edoc-doctor-appointment-system v1.0.1 was discovered to contain a SQL injection vulnerability via the id parameter at /patient/booking.php...
CVE-2022-36544: Improper Neutralization of Special Elements used in an SQL Command
Edoc-doctor-appointment-system v1.0.1 was discovered to contain a SQL injection vulnerability via the id parameter at /patient/booking.php...
PT-2022-21053
Name of the Vulnerable Software and Affected Versions Car Rental Management System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the "/car-rental-management-system/admin/manage booking.php?id=" API endpoint, specifically through the id variable...
PT-2022-21051
Name of the Vulnerable Software and Affected Versions Car Rental Management System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the car-rental-management-system/booking.php endpoint, specifically through the car id parameter. Recommendations Fo...
CVE-2022-32024: Improper Neutralization of Special Elements used in an SQL Command
Car Rental Management System v1.0 is vulnerable to SQL Injection via car-rental-management-system/booking.php?carid=...
PT-2022-19954
Name of the Vulnerable Software and Affected Versions Online Sports Complex Booking System version 1.0 Description The issue concerns a SQL Injection vulnerability via the "/scbs/admin/bookings/view booking.php?id=" endpoint, where an attacker can inject malicious SQL code using the id parameter...
CVE-2022-28094
SCBS Online Sports Venue Reservation System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the fid parameter at booking.php...
Cross site scripting
SCBS Online Sports Venue Reservation System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the fid parameter at booking.php...
CVE-2022-28094
SCBS Online Sports Venue Reservation System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the fid parameter at booking.php...
PT-2022-18806
Name of the Vulnerable Software and Affected Versions SCBS Online Sports Venue Reservation System version 1.0 Description The SCBS Online Sports Venue Reservation System contains a cross-site scripting XSS issue. This is due to the fid parameter at the "booking.php" endpoint. Recommendations For...
CVE-2022-28094: Improper Neutralization of Input During Web Page Generation
SCBS Online Sports Venue Reservation System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the fid parameter at booking.php...