69 matches found
CVE-2022-28000: Improper Neutralization of Special Elements used in an SQL Command
Car Rental System v1.0 was discovered to contain a SQL injection vulnerability at /CarRental/booking.php via the id parameter...
PT-2022-18740
Name of the Vulnerable Software and Affected Versions Car Rental System version 1.0 Description The issue is related to a SQL injection vulnerability. It affects the /Car Rental/booking.php endpoint via the id parameter. Recommendations For Car Rental System version 1.0, consider restricting acce...
CVE-2020-29287
An SQL injection vulnerability was discovered in Car Rental Management System v1.0 can be exploited via the id parameter in viewcar.php or the carid parameter in booking.php...
PT-2020-17135
Name of the Vulnerable Software and Affected Versions Car Rental Management System version 1.0 Description An SQL injection issue was found in the Car Rental Management System. This can be exploited through the id parameter in "view car.php" or the car id parameter in "booking.php". Recommendatio...
CVE-2020-29287: Improper Neutralization of Special Elements used in an SQL Command
An SQL injection vulnerability was discovered in Car Rental Management System v1.0 can be exploited via the id parameter in viewcar.php or the carid parameter in booking.php...
bestcityhome.com XSS vulnerability
Open Bug Bounty ID: OBB-704752 Description| Value ---|--- Affected Website:| bestcityhome.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
bulgariaski.com XSS vulnerability
Open Bug Bounty ID: OBB-586900 Description| Value ---|--- Affected Website:| bulgariaski.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
roomsok.com XSS vulnerability
Vulnerable URL: http://roomsok.com/booking.php?premises=1"...
Beauty Parlour & SPA Saloon Management System - Blind SQL Injection
Vulnerability Title : Beauty Parlour & SPA Saloon Management System Unauthenticated Blind SQL Injection booking.php age Vulnerability Date : 11/07/2016 Exploit Author : Yakir Wizman Vendor Homepage : http://rexbd.net/software/beauty-parlour-and-spa-saloon-management-system Version : All Versions...