CVE-2022-31344

Online Car Wash Booking System v1.0 is vulnerable to SQL Injection at /ocwbs/classes/Master.php?f=delete_booking. The Red Hat, CNVD, CNNVD, and NVD records corroborate a persistent SQLi flaw originating from lacking input validation in that endpoint, enabling potential unauthorized data access or...

CVE-2022-31344

Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/classes/Master.php?f=deletebooking...

CVE-2022-31345

CVE-2022-31345 affects Online Car Wash Booking System v1.0. Vulnerability: SQL Injection via /ocwbs/admin/?page=user/manage_user&id=. Root cause: input is not validated in the manage_user endpoint, enabling arbitrary SQL execution. Impact: potential exposure/alteration of database data as describ...

CVE-2022-31346

CVE-2022-31346 affects Online Car Wash Booking System v1.0. The vulnerability is a SQL Injection in the delete_service path handled by /ocwbs/classes/Master.php?f=delete_service, caused by lack of validation of external input. Impact per sources includes potential exposure of sensitive data and f...

CVE-2022-31347

CVE-2022-31347 affects Online Car Wash Booking System v1.0. The vulnerability is a SQL Injection via /ocwbs/classes/Master.php?f=delete_vehicle. The issue arises from improper validation/sanitization of external input in that endpoint, enabling attackers to craft input that manipulates SQL statem...

CVE-2022-31348

Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/bookings/updatestatus.php?id=...

CVE-2022-31348

CVE-2022-31348 affects Online Car Wash Booking System v1.0. The vulnerability is a SQL Injection in /ocwbs/admin/bookings/update_status.php?id=, caused by lack of input validation for external SQL statements. Impact described as potential data exposure/illicit database access; exploitation detail...

CVE-2022-31350

Online Car Wash Booking System v1.0 is vulnerable to SQL Injection through /ocwbs/admin/vehicles/manage_vehicle.php?id=. The vulnerability is corroborated by multiple connected reports (e.g., Red Hat CVE RH:CVE-2022-31350, CNVD-2022-53349) and is attributed to lack of input validation that allows...

CVE-2022-31351

CVE-2022-31351 affects Online Car Wash Booking System v1.0 by oretnom23. The flaw is a SQL injection in /ocwbs/admin/services/manage_price.php?id=, caused by unsanitized external input. This vulnerability is repeatedly reported across multiple feeds (NVD, Red Hat, CNVD/CNNVD, etc.) with high seve...

CVE-2022-31352

Online Car Wash Booking System v1.0 by oretnom23 has SQL injection in /ocwbs/admin/services/manageservice.php?id=...

CVE-2022-31352

The CVE-2022-31352 entry affects Online Car Wash Booking System v1.0 (oreo tn om23) and is caused by an SQL injection in /ocwbs/admin/services/manage_service.php?id=. The connected documents confirm the vulnerability as a SQL injection due to input validation gaps, enabling potentially unauthoriz...

CVE-2022-31353

CVE-2022-31353 affects Online Car Wash Booking System v1.0. The issue is a SQL injection in /ocwbs/admin/services/view_service.php?id=, allowing attacker-controlled input to influence SQL queries. The CVE is tracked in multiple feeds (NVD entry and Red Hat/CNVD/CVE lists) with a high to critical ...

CVE-2022-31353

Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/services/viewservice.php?id=...

CVE-2022-31354

CVE-2022-31354 affects Online Car Wash Booking System v1.0, where a SQL injection vulnerability exists in /ocwbs/classes/Master.php?f=get_vehicle_service. The root cause is unsanitized external input used in SQL statements, enabling an attacker to manipulate queries and potentially access or modi...

CVE-2022-31354

Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/classes/Master.php?f=getvehicleservice...

CVE-2022-31348: Improper Neutralization of Special Elements used in an SQL Command

Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/bookings/updatestatus.php?id=...

CVE-2022-31350: Improper Neutralization of Special Elements used in an SQL Command

Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/vehicles/managevehicle.php?id=...

CVE-2022-31346: Improper Neutralization of Special Elements used in an SQL Command

Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/classes/Master.php?f=deleteservice...

CVE-2022-31351: Improper Neutralization of Special Elements used in an SQL Command

Online Car Wash Booking System v1.0 by oretnom23 has SQL injection via /ocwbs/admin/services/manageprice.php?id=...

PT-2022-20698

Name of the Vulnerable Software and Affected Versions Online Car Wash Booking System version 1.0 Description The issue allows deletion of any file via the "/ocwbs/classes/Master.php?f=delete img" API endpoint. Recommendations For Online Car Wash Booking System version 1.0, consider restricting...