2596 matches found
Online Sports Complex Booking System跨站脚本漏洞
Online Sports Complex Booking System is an online stadium booking system from Carlo Montero's personal developer. Online Sports Complex Booking System is vulnerable to a cross-site scripting vulnerability that originates in /scbs/classes/Users. php?f=saveclient lacks a validation filter for...
CVE-2022-28992
A Cross-Site Request Forgery CSRF in Online Banquet Booking System v1.0 allows attackers to change admin credentials via a crafted POST request...
CVE-2022-28105
Online Sports Complex Booking System v1.0 was discovered to contain a blind SQL injection vulnerability via the id parameter in /scbs/viewfacility.php...
CVE-2022-28992
A Cross-Site Request Forgery CSRF in Online Banquet Booking System v1.0 allows attackers to change admin credentials via a crafted POST request...
Cross site request forgery (csrf)
A Cross-Site Request Forgery CSRF in Online Banquet Booking System v1.0 allows attackers to change admin credentials via a crafted POST request...
CVE-2022-28992
CVE-2022-28992 affects Online Banquet Booking System v1.0 and is a CSRF vulnerability that enables an attacker to change administrator credentials via a crafted POST request. Multiple sources confirm the impact and symmetry across advisories (e.g., Red Hat, CNVD, CNNVD, CVE listings). The core is...
CVE-2022-28992
A Cross-Site Request Forgery CSRF in Online Banquet Booking System v1.0 allows attackers to change admin credentials via a crafted POST request...
CVE-2022-28106
CVE-2022-28106 affects the Online Sports Complex Booking System v1.0. Public sources consistently describe an authorization flaw that lets an attacker take over a user account through a crafted POST request. The available documents do not provide explicit technical details on the affected compone...
CVE-2022-28105
Online Sports Complex Booking System v1.0 is affected by a blind SQL injection vulnerability in the id parameter of /scbs/view_facility.php. This flaw, identified in CVE-2022-28105, arises from unsanitized input used in SQL queries, enabling potential disclosure or manipulation of database data. ...
CVE-2022-28105: Improper Neutralization of Special Elements used in an SQL Command
Online Sports Complex Booking System v1.0 was discovered to contain a blind SQL injection vulnerability via the id parameter in /scbs/viewfacility.php...
PT-2022-18813
Name of the Vulnerable Software and Affected Versions Online Sports Complex Booking System version 1.0 Description The issue allows attackers to take over user accounts by sending a crafted POST request. Recommendations For Online Sports Complex Booking System version 1.0, at the moment, there is...
CVE-2022-28992: Cross-Site Request Forgery (CSRF)
A Cross-Site Request Forgery CSRF in Online Banquet Booking System v1.0 allows attackers to change admin credentials via a crafted POST request...
CVE-2022-28106: Improper Authentication
Online Sports Complex Booking System v1.0 was discovered to allow attackers to take over user accounts via a crafted POST request...
Online Banquet Booking System 跨站请求伪造漏洞
Online Banquet Booking System is an online banquet booking system. version 1.0 of Online Banquet Booking System is vulnerable to cross-site request forgery. An attacker could use this vulnerability to change the administrator credentials via a specially crafted POST request...
PT-2022-18812
Name of the Vulnerable Software and Affected Versions Online Sports Complex Booking System version 1.0 Description The issue is related to a blind SQL injection vulnerability. This vulnerability can be exploited via the id parameter in the "/scbs/view facility.php" API endpoint. Recommendations F...
CVE-2022-28962
Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/classes/Users.php?f=deleteclient...
CVE-2022-29304
Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /classes/master.php?f=delete Facility...
CVE-2022-29304
Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /classes/master.php?f=delete Facility...