CVE-2021-42667

CVE-2021-42667 CVE-2021-42667 - 온라인 이벤트 예약 및 예약 시스템 버전 2.3.0의 SQL 인젝션 취약점. 기술 설명: 이벤트 관리 소프트웨어 버전 2.3.0에 SQL 인젝션 취약점이 존재합니다. 공격자는 "USER" 웹 페이지의 취약한 "id" 매개변수를 악용하여 수행되는 SQL 쿼리를 조작할 수 있습니다. 결과적으로 공격자는 웹 서버에서 민감한 데이터를 추출할 수 있습니다. 취약한 페이지 - USER 취약한 매개변수 - "id" 악용 단계: 1...

CVE-2021-42662

CVE-2021-42662 CVE-2021-42662 - オンラインイベント予約・予約システムバージョン2.3.0における格納型クロスサイトスクリプティング脆弱性。 技術的説明: バージョン2.3.0のイベント管理ソフトウェアには、格納型XSS脆弱性が存在します。攻撃者はこの脆弱性を悪用して、Webサーバーを閲覧するユーザーの代わりにJavaScriptを実行させることができ、クッキーの盗難、改ざんなどが可能になります。 影響を受けるコンポーネント - 脆弱なページ - HOLY 脆弱なパラメータ - "reason" 悪用手順: 1...

PT-2025-37117

Name of the Vulnerable Software and Affected Versions PuneethReddyHC Event Management System version 1.0 Description A reflected Cross-Site Scripting XSS issue exists in the register.php script. The mobile parameter is not properly validated, and its value is echoed in the HTTP response without...

Free School Management Software 1.0 - (multiple) Stored Cross-Site Scripting Vulnerability

Exploit Title: Free School Management Software 1.0 - 'multiple' Stored Cross-Site Scripting XSS Exploit Author: fuzzyap1 Category: Web application Vendor Homepage: https://www.sourcecodester.com/php/15073/free-school-management-software.html Software Link:...

Free School Management Software 1.0 Cross Site Scripting

Exploit Title: Free School Management Software 1.0 - 'multiple' Stored Cross-Site Scripting XSS Exploit Author: fuzzyap1 Date: 7-12-2021 Category: Web application Vendor Homepage: https://www.sourcecodester.com/php/15073/free-school-management-software.html Software Link:...

Exploit for SQL Injection in Online_Event_Booking_And_Reservation_System_Project Online_Event_Booking_And_Reservation_System

CVE-2021-42667 CVE-2021-42667 - SQL Injection vulnerability in...

Exploit for SQL Injection in Online_Event_Booking_And_Reservation_System_Project Online_Event_Booking_And_Reservation_System

CVE-2021-42667 CVE-2021-42667 - SQL Injection vulnerability in...

Exploit for Cross-site Scripting in Online_Event_Booking_And_Reservation_System_Project Online_Event_Booking_And_Reservation_System

CVE-2021-42662 CVE-2021-42662 - Stored Cross-Site Scripting vu...

Online Event Booking and Reservation System 1.0 - (reason) Stored Cross-Site Scripting Vulnerability

Exploit Title: Online Event Booking and Reservation System 1.0 - 'reason' Stored Cross-Site Scripting XSS Exploit Author: Alon Leviev Category: Web application Vendor Homepage: https://www.sourcecodester.com/php/14241/online-event-booking-and-reservation-system-phpmysql.html Software Link:...

Online Event Booking And Reservation System 1.0 Cross Site Scripting

Exploit Title: Online Event Booking and Reservation System 1.0 - 'reason' Stored Cross-Site Scripting XSS Exploit Author: Alon Leviev Date: 22-10-2021 Category: Web application Vendor Homepage: https://www.sourcecodester.com/php/14241/online-event-booking-and-reservation-system-phpmysql.html...