CVE-2022-31346

Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/classes/Master.php?f=deleteservice...

CVE-2022-31346

CVE-2022-31346 affects Online Car Wash Booking System v1.0. The vulnerability is a SQL Injection in the delete_service path handled by /ocwbs/classes/Master.php?f=delete_service, caused by lack of validation of external input. Impact per sources includes potential exposure of sensitive data and f...

CVE-2022-31347

Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/classes/Master.php?f=deletevehicle...

CVE-2022-31347

CVE-2022-31347 affects Online Car Wash Booking System v1.0. The vulnerability is a SQL Injection via /ocwbs/classes/Master.php?f=delete_vehicle. The issue arises from improper validation/sanitization of external input in that endpoint, enabling attackers to craft input that manipulates SQL statem...

CVE-2022-31348

CVE-2022-31348 affects Online Car Wash Booking System v1.0. The vulnerability is a SQL Injection in /ocwbs/admin/bookings/update_status.php?id=, caused by lack of input validation for external SQL statements. Impact described as potential data exposure/illicit database access; exploitation detail...

CVE-2022-31348

Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/bookings/updatestatus.php?id=...

CVE-2022-31350

Online Car Wash Booking System v1.0 is vulnerable to SQL Injection through /ocwbs/admin/vehicles/manage_vehicle.php?id=. The vulnerability is corroborated by multiple connected reports (e.g., Red Hat CVE RH:CVE-2022-31350, CNVD-2022-53349) and is attributed to lack of input validation that allows...

CVE-2022-31351

CVE-2022-31351 affects Online Car Wash Booking System v1.0 by oretnom23. The flaw is a SQL injection in /ocwbs/admin/services/manage_price.php?id=, caused by unsanitized external input. This vulnerability is repeatedly reported across multiple feeds (NVD, Red Hat, CNVD/CNNVD, etc.) with high seve...

CVE-2022-31351

Online Car Wash Booking System v1.0 by oretnom23 has SQL injection via /ocwbs/admin/services/manageprice.php?id=...

CVE-2022-31352

The CVE-2022-31352 entry affects Online Car Wash Booking System v1.0 (oreo tn om23) and is caused by an SQL injection in /ocwbs/admin/services/manage_service.php?id=. The connected documents confirm the vulnerability as a SQL injection due to input validation gaps, enabling potentially unauthoriz...

CVE-2022-31352

Online Car Wash Booking System v1.0 by oretnom23 has SQL injection in /ocwbs/admin/services/manageservice.php?id=...

CVE-2022-31353

CVE-2022-31353 affects Online Car Wash Booking System v1.0. The issue is a SQL injection in /ocwbs/admin/services/view_service.php?id=, allowing attacker-controlled input to influence SQL queries. The CVE is tracked in multiple feeds (NVD entry and Red Hat/CNVD/CVE lists) with a high to critical ...

CVE-2022-31353

Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/services/viewservice.php?id=...

CVE-2022-31354

CVE-2022-31354 affects Online Car Wash Booking System v1.0, where a SQL injection vulnerability exists in /ocwbs/classes/Master.php?f=get_vehicle_service. The root cause is unsanitized external input used in SQL statements, enabling an attacker to manipulate queries and potentially access or modi...

CVE-2022-31354

Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/classes/Master.php?f=getvehicleservice...

WordPress VikBooking Hotel Booking Engine

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress VikBooking Hotel Booking Engine...

CVE-2022-30817

Simple Bus Ticket Booking System 1.0 is vulnerable to SQL Injection via /SimpleBusTicket/index.php...

CVE-2022-30817

CVE-2022-30817 concerns the Simple Bus Ticket Booking System 1.0, with a vulnerability described as a SQL injection in the request path /SimpleBusTicket/index.php. Connected sources confirm this vulnerability across multiple feeds (NVD/Red Hat/CNVD/CNNVD, etc.), indicating the flaw affects the ap...

CVE-2022-1528

The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.5.9 does not escape the current URL before putting it back in a JavaScript context, leading to a Reflected Cross-Site Scripting...

Cross site scripting

The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.5.9 does not escape the current URL before putting it back in a JavaScript context, leading to a Reflected Cross-Site Scripting...