7852 matches found
CVE-2024-48246
Vehicle Management System 1.0 contains a Stored Cross-Site Scripting XSS vulnerability in the "Name" parameter of /vehicle-management/booking.php...
CVE-2025-1962
The CVE-2025-1962 entry concerns projectworlds Online Hotel Booking 1.0. Affected component is the file /admin/addroom.php, where manipulation of the roomname parameter enables SQL injection. Exploitation can be performed remotely and has been publicly disclosed. Multiple sources (NVD, Red Hat, C...
CVE-2025-1962 projectworlds Online Hotel Booking addroom.php sql injection
A vulnerability was found in projectworlds Online Hotel Booking 1.0. It has been classified as critical. This affects an unknown part of the file /admin/addroom.php. The manipulation of the argument roomname leads to sql injection. It is possible to initiate the attack remotely. The exploit has...
CVE-2025-1962 projectworlds Online Hotel Booking addroom.php sql injection
A vulnerability was found in projectworlds Online Hotel Booking 1.0. It has been classified as critical. This affects an unknown part of the file /admin/addroom.php. The manipulation of the argument roomname leads to sql injection. It is possible to initiate the attack remotely. The exploit has...
CVE-2025-1952
A vulnerability, which was classified as critical, was found in PHPGurukul Restaurant Table Booking System 1.0. Affected is an unknown function of the file /admin/password-recovery.php. The manipulation of the argument username/mobileno leads to sql injection. It is possible to launch the attack...
CVE-2025-1952
CVE-2025-1952 affects PHPGurukul Restaurant Table Booking System 1.0. The vulnerability is an SQL injection in /admin/password-recovery.php via the username/mobileno parameter, caused by lack of input validation. It is exploitable remotely and has been publicly disclosed; multiple sources classif...
CVE-2025-1952 PHPGurukul Restaurant Table Booking System password-recovery.php sql injection
A vulnerability, which was classified as critical, was found in PHPGurukul Restaurant Table Booking System 1.0. Affected is an unknown function of the file /admin/password-recovery.php. The manipulation of the argument username/mobileno leads to sql injection. It is possible to launch the attack...
CVE-2025-1906
A vulnerability has been found in PHPGurukul Restaurant Table Booking System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/profile.php. The manipulation of the argument mobilenumber leads to sql injection. The attack can be initiated remotely. The...
CVE-2025-1906
The CVE-2025-1906 entry concerns PHPGurukul Restaurant Table Booking System 1.0. A vulnerability exists in the /admin/profile.php code path where manipulation of the mobilenumber parameter leads to a SQL injection. The issue is exploitable remotely, and the vulnerability is described as critical ...
CVE-2025-1906 PHPGurukul Restaurant Table Booking System profile.php sql injection
A vulnerability has been found in PHPGurukul Restaurant Table Booking System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/profile.php. The manipulation of the argument mobilenumber leads to sql injection. The attack can be initiated remotely. The...
CVE-2025-1901
A vulnerability was found in PHPGurukul Restaurant Table Booking System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/checkavailability.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely...
CVE-2025-1900
A vulnerability was found in PHPGurukul Restaurant Table Booking System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /add-table.php. The manipulation of the argument tableno leads to sql injection. The attack may be launched remotely. The exploi...
CVE-2025-1901 PHPGurukul Restaurant Table Booking System check_availability.php sql injection
A vulnerability was found in PHPGurukul Restaurant Table Booking System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/checkavailability.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely...
CVE-2025-1894
A vulnerability was found in PHPGurukul Restaurant Table Booking System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /search-result.php. The manipulation of the argument searchdata leads to sql injection. The attack may be launched remotely...
CVE-2025-1894 PHPGurukul Restaurant Table Booking System search-result.php sql injection
A vulnerability was found in PHPGurukul Restaurant Table Booking System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /search-result.php. The manipulation of the argument searchdata leads to sql injection. The attack may be launched remotely...
CVE-2025-1894
The CVE-2025-1894 entry concerns PHPGurukul Restaurant Table Booking System 1.0. Affected component: /search-result.php. Root cause: manipulation of the searchdata parameter leads to SQL injection, enabling remote exploitation. Public exploit status is indicated in the initial description. While ...
PT-2025-9720 · Unknown · Projectworlds Online Hotel Booking
Name of the Vulnerable Software and Affected Versions: projectworlds Online Hotel Booking version 1.0 Description: A critical issue has been found in projectworlds Online Hotel Booking, affecting an unknown part of the file /admin/addroom.php. The manipulation of the roomname argument leads to SQ...
PHPGurukul Restaurant Table Booking System 安全漏洞
Restaurant Table Booking System is a restaurant table reservation system. Restaurant Table Booking System suffers from a SQL injection vulnerability that stems from the incorrect manipulation of the parameter tableno in the /add-table.php file can lead to sql injection. No details of the...
PHPGurukul Restaurant Table Booking System 安全漏洞
Restaurant Table Booking System is a restaurant table reservation system. Restaurant Table Booking System suffers from a SQL injection vulnerability that stems from an incorrect operation of the parameter mobilenumber in the /admin/profile.php file that can lead to SQL injection. No details of th...
CVE-2025-27264
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Creativeitem Doctor Appointment Booking doctor-appointment-booking allows PHP Local File Inclusion.This issue affects Doctor Appointment Booking: from n/a through = 1.0.0...