4 matches found
CVE-2024-37800: Improper Neutralization of Input During Web Page Generation
CodeProjects Restaurant Reservation System v1.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the Date parameter at index.php...
CVE-2024-37799: Improper Neutralization of Special Elements used in an SQL Command
CodeProjects Restaurant Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the reservid parameter at viewreservations.php...
CVE-2024-37799
The CodeProjects Restaurant Reservation System v1.0 is vulnerable to a SQL injection vulnerability. The flaw originates from the improper neutralization of special elements used in an SQL command within the reserv_id parameter at the view_reservations.php endpoint. Exploitation of this vulnerabil...
