5 matches found
CVE-2025-63450
Car-Booking-System-PHP v.1.0 is vulnerable to Cross Site Scripting XSS in /carlux/booking.php...
CVE-2025-63450
The Car-Booking-System-PHP version 1.0 is vulnerable to Cross-Site Scripting (XSS) due to improper neutralization of input in the /carlux/booking.php file. This flaw allows for the injection of malicious scripts through the vulnerable endpoint, although the specific vulnerable parameter is not sp...
Online Tours & Travels Management System SQL Injection Vulnerability
Online Tours & Travels Management System is an online travel management system by Mayuri K. Individual developer. A SQL injection vulnerability exists in Online Tours & Travels Management System, which can be exploited via the id parameter of the exec function on the booking.php page...
Doctor’s Appointment System SQL注入漏洞
Doctor's Appointment System is a doctor's appointment system by Hashen Udara, an individual developer. Doctor's Appointment System version 1.0 suffers from a SQL injection vulnerability that originates from an attacker being able to achieve SQL injection via the ?id= parameter of its booking.php...
Car Rental System SQL注入漏洞
Car Rental System is a car rental system by individual developer AMEY THAKUR in India. car Rental System v1.0 is vulnerable to SQL injection, which originates from the lack of SQL data filtering for the id parameter in /CarRental/booking.php, and can be exploited by attackers to execute illegal S...