CVE-2021-42663

An HTML injection vulnerability exists in Sourcecodester Online Event Booking and Reservation System in PHP/MySQL via the msg parameter to /event-management/index.php. An attacker can leverage this vulnerability in order to change the visibility of the website. Once the target user clicks on a...

CVE-2021-42663

Sourcecodester Online Event Booking and Reservation System 2.3.0 is affected by a cross-site scripting vulnerability (HTML injection) in the /event-management/index.php page, via the msg parameter. The vulnerable component is index.php; an attacker-supplied payload in msg can cause the victim to ...

CVE-2021-42662

A Stored Cross Site Scripting XSS vulnerability exists in Sourcecodester Online Event Booking and Reservation System in PHP/MySQL via the Holiday reason parameter. An attacker can leverage this vulnerability in order to run javascript commands on the web server surfers behalf, which can lead to...

CVE-2021-42662

A Stored Cross Site Scripting XSS vulnerability exists in Sourcecodester Online Event Booking and Reservation System in PHP/MySQL via the Holiday reason parameter. An attacker can leverage this vulnerability in order to run javascript commands on the web server surfers behalf, which can lead to...

CVE-2021-42662

CVE-2021-42662 is a Stored Cross-Site Scripting (XSS) vulnerability affecting the Sourcecodester Online Event Booking and Reservation System (PHP/MySQL). The issue is triggered via the holiday reason parameter (also referenced as reason/holiday field in various advisories) and can allow an attack...

CVE-2021-42662

A Stored Cross Site Scripting XSS vulnerability exists in Sourcecodester Online Event Booking and Reservation System in PHP/MySQL via the Holiday reason parameter. An attacker can leverage this vulnerability in order to run javascript commands on the web server surfers behalf, which can lead to...

Engineers Online Portal SQL注入漏洞

Sourcecodester Online Event Booking and Reservation System is developed using PHP, MySQL database, HTML, CSS, Javascript, Bootstrap and AdminLTE. The system can be accessed by three types of users, namely system administrators, students, and instructors. sourcecodester Online Event Booking and...

Engineers Online Portal 跨站脚本漏洞

Sourcecodester Online Event Booking and Reservation System is developed using PHP, MySQL database, HTML, CSS, Javascript, Bootstrap and AdminLTE. The system can be accessed by 3 types of users, namely system administrators, students and faculty. sourcecodester Online Event Booking and Reservation...

Exploit for SQL Injection in Online_Event_Booking_And_Reservation_System_Project Online_Event_Booking_And_Reservation_System

CVE-2021-42667 CVE-2021-42667 - SQL Injection vulnerability in...

Exploit for Cross-site Scripting in Online_Event_Booking_And_Reservation_System_Project Online_Event_Booking_And_Reservation_System

CVE-2021-42663 CVE-2021-42662 - HTML Injection vulnerability i...

Exploit for Cross-site Scripting in Online_Event_Booking_And_Reservation_System_Project Online_Event_Booking_And_Reservation_System

CVE-2021-42663 CVE-2021-42662 - HTML Injection vulnerability i...

Exploit for Cross-site Scripting in Online_Event_Booking_And_Reservation_System_Project Online_Event_Booking_And_Reservation_System

CVE-2021-42662 CVE-2021-42662 - Stored Cross-Site Scripting vu...

Online Event Booking and Reservation System 1.0 - 'reason' Stored Cross-Site Scripting (XSS)

Exploit Title: Online Event Booking and Reservation System 1.0 - 'reason' Stored Cross-Site Scripting XSS Exploit Author: Alon Leviev Date: 22-10-2021 Category: Web application Vendor Homepage: https://www.sourcecodester.com/php/14241/online-event-booking-and-reservation-system-phpmysql.html...

CVE-2021-42223

Cross Site Scripting XSS.vulnerability exists in Online DJ Booking Management System 1.0 in view-booking-detail.php...

CVE-2021-42223

Cross Site Scripting XSS.vulnerability exists in Online DJ Booking Management System 1.0 in view-booking-detail.php...

Cross site scripting

Cross Site Scripting XSS.vulnerability exists in Online DJ Booking Management System 1.0 in view-booking-detail.php...

CVE-2021-42223

Cross Site Scripting XSS.vulnerability exists in Online DJ Booking Management System 1.0 in view-booking-detail.php...

CVE-2021-42223

CVE-2021-42223 affects Online DJ Booking Management System 1.0. The vulnerability is a Cross-Site Scripting (XSS) in view-booking-detail.php. Root cause: unsanitized input leading to script execution. CVSS scores reported: CVSS v2.0 base score 4.3 (MEDIUM) and CVSS v3.1 base score 6.1 (MEDIUM). E...

CVE-2021-42223

Cross Site Scripting XSS.vulnerability exists in Online DJ Booking Management System 1.0 in view-booking-detail.php...

PT-2021-23561 · Unknown · Online Dj Booking Management System

Name of the Vulnerable Software and Affected Versions: Online DJ Booking Management System version 1.0 Description: The issue is related to Cross Site Scripting XSS in the view-booking-detail.php file. Recommendations: For Online DJ Booking Management System version 1.0, consider restricting acce...