PT-2022-20700

Name of the Vulnerable Software and Affected Versions Online Car Wash Booking System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the /ocwbs/classes/Master.php API endpoint, specifically when the f parameter is set to delete booking...

CVE-2022-31345: Improper Neutralization of Special Elements used in an SQL Command

Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/?page=user/manageuser&id=...

PT-2022-20709

Name of the Vulnerable Software and Affected Versions Online Car Wash Booking System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the "/ocwbs/admin/services/view service.php?id=" endpoint, specifically through the id variable. No information is...

PT-2022-20699

Name of the Vulnerable Software and Affected Versions Online Car Wash Booking System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the /ocwbs/admin/?page=bookings/view details&id= endpoint, where the id parameter is vulnerable. No information is...

CVE-2022-31347: Improper Neutralization of Special Elements used in an SQL Command

Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/classes/Master.php?f=deletevehicle...

PT-2022-20710

Name of the Vulnerable Software and Affected Versions Online Car Wash Booking System version 1.0 Description The issue is related to SQL Injection via the /ocwbs/classes/Master.php?f=get vehicle service endpoint. This allows for potential exploitation. Recommendations For Online Car Wash Booking...

CVE-2022-31344: Improper Neutralization of Special Elements used in an SQL Command

Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/classes/Master.php?f=deletebooking...

PT-2022-20703

Name of the Vulnerable Software and Affected Versions Online Car Wash Booking System version 1.0 Description The issue is related to SQL Injection via the /ocwbs/classes/Master.php?f=delete vehicle endpoint. This allows for potential exploitation. No information is provided about the estimated...

CVE-2022-31353: Improper Neutralization of Special Elements used in an SQL Command

Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/services/viewservice.php?id=...

CVE-2022-31342: Undefined Security Weakness

Online Car Wash Booking System v1.0 is vulnerable to Delete any file via /ocwbs/classes/Master.php?f=deleteimg...

CVE-2022-31354: Improper Neutralization of Special Elements used in an SQL Command

Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/classes/Master.php?f=getvehicleservice...

PT-2022-20706

Name of the Vulnerable Software and Affected Versions Online Car Wash Booking System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the "/ocwbs/admin/vehicles/manage vehicle.php" endpoint, specifically through the id variable. Recommendations For...

PT-2022-20702

Name of the Vulnerable Software and Affected Versions Online Car Wash Booking System version 1.0 Description The issue is related to SQL Injection via the /ocwbs/classes/Master.php?f=delete service endpoint. This allows for potential exploitation. Recommendations For Online Car Wash Booking Syste...

PT-2022-20701

Name of the Vulnerable Software and Affected Versions Online Car Wash Booking System version 1.0 Description The issue concerns SQL Injection via the /ocwbs/admin/?page=user/manage user&id= endpoint. This allows for potential manipulation of database queries. No information is provided about the...

CVE-2022-30817

CVE-2022-30817 concerns the Simple Bus Ticket Booking System 1.0, with a vulnerability described as a SQL injection in the request path /SimpleBusTicket/index.php. Connected sources confirm this vulnerability across multiple feeds (NVD/Red Hat/CNVD/CNNVD, etc.), indicating the flaw affects the ap...

PT-2022-20331

Name of the Vulnerable Software and Affected Versions Simple Bus Ticket Booking System version 1.0 Description The issue concerns SQL Injection, which can be exploited via the "/SimpleBusTicket/index.php" API endpoint. Recommendations For Simple Bus Ticket Booking System version 1.0, update the...

CVE-2022-30817: Improper Neutralization of Special Elements used in an SQL Command

Simple Bus Ticket Booking System 1.0 is vulnerable to SQL Injection via /SimpleBusTicket/index.php...

Online Sports Complex Booking System SQL注入漏洞

Online Sports Complex Booking System is an online stadium booking system. Online Sports Complex Booking System version 1.0 is vulnerable to SQL injection and no details of the vulnerability are available...

Online Sports Complex Booking System授权问题漏洞

Online Sports Complex Booking System is an online stadium booking system. version 1.0 of the Online Sports Complex Booking System is vulnerable to an authorization issue that could be exploited by attackers to take over a user's account via a specially crafted POST request...

Online Sports Complex Booking System SQL注入漏洞（CNVD-2022-58666）

Online Sports Complex Booking System is an online stadium booking system from Carlo Montero's personal developer. Online Sports Complex Booking System v1.0 is vulnerable to SQL injection, which can be exploited by attackers to execute illegal SQL commands to steal sensitive database data...