CVE-2021-38758

CVE-2021-38758 affects the Online Catering Reservation System 1.0. The vulnerability is a directory traversal due to lack of validation in index.php, allowing access to restricted files as described in the CVE entry. NVD lists CVSS v3.1 base score 7.5 (Network, Low complexity, No privileges, No u...

CVE-2021-38758

Directory traversal vulnerability in Online Catering Reservation System 1.0 exists due to lack of validation in index.php...

CVE-2021-38752

CVE-2021-38752 is an XSS vulnerability in the Online Catering Reservation System (PHP, Sourcecodester). The issue occurs in the search bar where user input is not properly sanitized, allowing an attacker to arbitrarily inject code in the search functionality. CVSS metrics: AV:N/AC:L/PR:L/UI:R/S:C...

Online Hotel Reservation System 1.0 - (Multiple) Cross-site scripting Vulnerability

Exploit Title: Online Hotel Reservation System 1.0 - 'Multiple' Cross-site scripting XSS Exploit Author: Mohammad Koochaki Vendor Homepage: https://www.sourcecodester.com/php/13492/online-hotel-reservation-system-phpmysqli.html Software Link:...

Dental Clinic Appointment Reservation System 1.0 Cross Site Request Forgery

Exploit Title: Dental Clinic Appointment Reservation System 1.0 - Cross Site Request Forgery Add Admin Date: 15-05-2021 Exploit Author: Reza Afsahi Vendor Homepage: https://www.sourcecodester.com/php/6848/appointment-reservation-system.html Software Link:...

Online Catering Reservation System 1.0 SQL Injection

Exploit Title: Online Catering Reservation System - SQL Injection Authenticated Date: 2021-02-25 Exploit Author: [email protected] Vendor Homepage: https://www.sourcecodester.com/php/11355/online-catering-reservation.html Software Link:...

Seat-Reservation-System SQL Injection Vulnerability

Seat-Reservation-System is a seat reservation system. A sql injection vulnerability exists in Seat-Reservation-System 1.0. The vulnerability is caused due to the id and file parameters in the index.php file not being input/output filtered for special characters. An attacker can exploit this...

CVE-2020-36002

Seat-Reservation-System 1.0 has a SQL injection vulnerability in index.php in the id parameter where attackers can obtain sensitive database information...

CVE-2020-36002

Seat-Reservation-System 1.0 has a SQL injection vulnerability in index.php in the id parameter where attackers can obtain sensitive database information...

Sql injection

Seat-Reservation-System 1.0 has a SQL injection vulnerability in index.php in the id parameter where attackers can obtain sensitive database information...

CVE-2020-36002

Seat-Reservation-System 1.0 has a SQL injection vulnerability in index.php in the id parameter where attackers can obtain sensitive database information...

CVE-2020-36002

Seat-Reservation-System 1.0 has a SQL injection vulnerability in index.php in the id parameter where attackers can obtain sensitive database information...

CVE-2020-36002

CVE-2020-36002 affects Seat-Reservation-System 1.0. A SQL injection in index.php parameter id (and related file param per PT-2021-11898) can lead to disclosure of sensitive database information. No official patch/version is detailed in the provided sources; mitigations include parameter access re...

PT-2021-11898 · Unknown · Seat Reservation System

Name of the Vulnerable Software and Affected Versions: Seat-Reservation-System version 1.0 Description: The issue is related to a SQL injection vulnerability in the index.php file, specifically affecting the id and file parameters. This allows attackers to obtain sensitive database information...

Sourcecodester Seat-Reservation-System SQL注入漏洞

Seat-Reservation-System is a seat reservation system. A sql injection vulnerability exists in Seat-Reservation-System 1.0. The vulnerability is caused due to the id and file parameters in the index.php file not being input/output filtered for special characters. An attacker can exploit this...

Online Hotel Reservation System 1.0 SQL Injection

Exploit Title: Online Hotel Reservation System 1.0 - 'id' Time-based SQL Injection Exploit Author: Mesut Cetin Date: 2021-01-14 Vendor Homepage: https://www.sourcecodester.com/php/13492/online-hotel-reservation-system-phpmysqli.html Software Link:...

Online Hotel Reservation System 1.0 - 'id' Time-based SQL Injection

Exploit Title: Online Hotel Reservation System 1.0 - 'id' Time-based SQL Injection Exploit Author: Mesut Cetin Date: 2021-01-14 Vendor Homepage: https://www.sourcecodester.com/php/13492/online-hotel-reservation-system-phpmysqli.html Software Link:...

Online Hotel Reservation System 1.0 - Cross-site request forgery (CSRF)

Exploit Title: Online Hotel Reservation System 1.0 - Cross-site request forgery CSRF Exploit Author: Mesut Cetin Date: 2021-01-14 Vendor Homepage: https://www.sourcecodester.com/php/13492/online-hotel-reservation-system-phpmysqli.html Software Link:...

CVE-2020-26773

Restaurant Reservation System 1.0 suffers from an authenticated SQL injection vulnerability, which allows a remote, authenticated attacker to execute arbitrary SQL commands via the date parameter in includes/reservation.inc.php...

CVE-2020-26773

Restaurant Reservation System 1.0 suffers from an authenticated SQL injection vulnerability, which allows a remote, authenticated attacker to execute arbitrary SQL commands via the date parameter in includes/reservation.inc.php...