2590 matches found
Sql injection
Online Bus Booking System Project Using PHP/MySQL version 1.0 has SQL injection via the login page. By placing SQL injection payload on the login page attackers can bypass the authentication and can gain the admin privilege...
CVE-2020-25889
Online Bus Booking System Project Using PHP/MySQL version 1.0 has SQL injection via the login page. By placing SQL injection payload on the login page attackers can bypass the authentication and can gain the admin privilege...
CVE-2020-25889
CVE-2020-25889 affects the Online Bus Booking System Project Using PHP/MySQL v1.0. The login page is vulnerable to SQL injection due to improper input handling, allowing an attacker to bypass authentication and potentially gain admin privileges. Multiple sources (NVD, Red Hat advisory, PRION, CVE...
PT-2020-16251
Name of the Vulnerable Software and Affected Versions Online Bus Booking System Project Using PHP/MySQL version 1.0 Description The issue allows remote attackers to bypass authentication and execute arbitrary SQL commands via the login page by placing a SQL injection payload. This can lead to...
CVE-2020-25889: Improper Neutralization of Special Elements used in an SQL Command
Online Bus Booking System Project Using PHP/MySQL version 1.0 has SQL injection via the login page. By placing SQL injection payload on the login page attackers can bypass the authentication and can gain the admin privilege...
PT-2020-17132
Name of the Vulnerable Software and Affected Versions Online Doctor Appointment Booking System affected versions not specified Description An SQL injection issue was found in the Online Doctor Appointment Booking System, which uses PHP and MySQL. The vulnerability is exploitable via the q paramet...
CVE-2020-29283: Improper Neutralization of Special Elements used in an SQL Command
An SQL injection vulnerability was discovered in Online Doctor Appointment Booking System PHP and Mysql via the q parameter to getuser.php...
SourceCodester Online Bus Booking System SQL Injection (CVE-2020-25273)
An SQL injection vulnerability exists in SourceCodester Online Bus Booking System. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
CVE-2020-25272
In SourceCodester Online Bus Booking System 1.0, there is XSS through the name parameter in booknow.php...
CVE-2020-25272
In SourceCodester Online Bus Booking System 1.0, there is XSS through the name parameter in booknow.php...
Design/Logic Flaw
In SourceCodester Online Bus Booking System 1.0, there is XSS through the name parameter in booknow.php...
CVE-2020-25273
In SourceCodester Online Bus Booking System 1.0, there is Authentication bypass on the Admin Login screen in admin.php via username or password SQL injection...
CVE-2020-25273
The CVE-2020-25273 entry concerns SourceCodester Online Bus Booking System 1.0 with an authentication bypass on the Admin Login. The connected exploit repository provides concrete details: the vulnerability resides in the login flow (admin.php/login_auth.php) and is triggered via SQL injection in...
CVE-2020-25272
In SourceCodester Online Bus Booking System 1.0, there is XSS through the name parameter in booknow.php...
CVE-2020-25272
CVE-2020-25272 corresponds to an XSS vulnerability in SourceCodester Online Bus Booking System 1.0, triggered via the name parameter in book_now.php. The available connected documents confirm the affected product and the vulnerability vector, but do not provide details on the exploitation status,...
CVE-2020-25272: Improper Neutralization of Input During Web Page Generation
In SourceCodester Online Bus Booking System 1.0, there is XSS through the name parameter in booknow.php...
PT-2020-16055
Name of the Vulnerable Software and Affected Versions SourceCodester Online Bus Booking System version 1.0 Description The issue concerns a problem where an attacker can inject malicious code through the name parameter in the "book now.php" endpoint. This allows for potential exploitation...
PT-2020-16056
Name of the Vulnerable Software and Affected Versions SourceCodester Online Bus Booking System version 1.0 Description The issue concerns an authentication bypass on the Admin Login screen. This is achieved through SQL injection in the username or password fields in the admin.php file...
CVE-2020-25273: Improper Neutralization of Special Elements used in an SQL Command
In SourceCodester Online Bus Booking System 1.0, there is Authentication bypass on the Admin Login screen in admin.php via username or password SQL injection...
