4245 matches found
CVE-2025-10623
The CVE-2025-10623 entry concerns SourceCodester Hotel Reservation System 1.0. The vulnerable element is the deleteuser.php file, where manipulation of the ID parameter results in an SQL injection. The vulnerability is exploitable remotely and there are public PoCs. Exploitation is supported by m...
CVE-2025-10623 SourceCodester Hotel Reservation System deleteuser.php sql injection
A vulnerability was identified in SourceCodester Hotel Reservation System 1.0. The impacted element is an unknown function of the file deleteuser.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and...
CVE-2025-10621
A vulnerability was determined in SourceCodester Hotel Reservation System 1.0. The affected element is an unknown function of the file editroomimage.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly...
CVE-2025-10621
A vulnerability was determined in SourceCodester Hotel Reservation System 1.0. The affected element is an unknown function of the file editroomimage.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly...
CVE-2025-10621 SourceCodester Hotel Reservation System editroomimage.php sql injection
A vulnerability was determined in SourceCodester Hotel Reservation System 1.0. The affected element is an unknown function of the file editroomimage.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly...
CVE-2025-10621
SourceCodester Hotel Reservation System 1.0 contains a SQL injection vulnerability in editroomimage.php caused by manipulation of the ID parameter. Exploitation can be performed remotely, and publicly disclosed exploits exist. Remediation/mitigation guidance from PT-2025-38281 suggests a temporar...
CVE-2025-10621 SourceCodester Hotel Reservation System editroomimage.php sql injection
A vulnerability was determined in SourceCodester Hotel Reservation System 1.0. The affected element is an unknown function of the file editroomimage.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly...
CVE-2025-10623: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was identified in SourceCodester Hotel Reservation System 1.0. The impacted element is an unknown function of the file deleteuser.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and...
CVE-2025-10621: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was determined in SourceCodester Hotel Reservation System 1.0. The affected element is an unknown function of the file editroomimage.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly...
SourceCodester Hotel Reservation System SQL注入漏洞
SourceCodester Hotel Reservation System is a SourceCodester open source hotel reservation system. A SQL injection vulnerability exists in SourceCodester Hotel Reservation System version 1.0, which stems from incorrect manipulation of the parameter ID in the file deleteuser.php, which could lead t...
PT-2025-38281
Name of the Vulnerable Software and Affected Versions: SourceCodester Hotel Reservation System version 1.0 Description: A SQL injection issue exists in the editroomimage.php file due to manipulation of the ID argument. This can be initiated remotely. The exploit has been publicly disclosed...
SourceCodester Hotel Reservation System SQL注入漏洞
SourceCodester Hotel Reservation System is a SourceCodester open source hotel reservation system. A SQL injection vulnerability exists in SourceCodester Hotel Reservation System version 1.0, which stems from incorrect manipulation of the parameter ID in the file editroomimage.php, which could lea...
CVE-2025-56280
code-projects Food Ordering Review System 1.0 is vulnerable to Cross Site Scripting XSS in the area where users submit reservation information...
CVE-2025-56280
code-projects Food Ordering Review System 1.0 is vulnerable to Cross Site Scripting XSS in the area where users submit reservation information...
PT-2025-38500
Name of the Vulnerable Software and Affected Versions Woo superb slideshow transition gallery with random effect plugin for WordPress versions through 9.1 Description The software is susceptible to SQL Injection through the 'woo-superb-slideshow' shortcode. Insufficient escaping of user-supplied...
CVE-2025-56280: Improper Neutralization of Input During Web Page Generation
code-projects Food Ordering Review System 1.0 is vulnerable to Cross Site Scripting XSS in the area where users submit reservation information...
CVE-2025-56280
The code-projects Food Ordering Review System version 1.0 is vulnerable to Cross-Site Scripting (XSS) due to the incorrect handling of user-submitted input in the reservation information area. This vulnerability allows for the execution of malicious scripts in a victim's browser. At this time, no...
CVE-2025-56280
code-projects Food Ordering Review System 1.0 is vulnerable to Cross Site Scripting XSS in the area where users submit reservation information...
PT-2025-37989
Name of the Vulnerable Software and Affected Versions: code-projects Food Ordering Review System version 1.0 Description: The Food Ordering Review System is susceptible to a Cross Site Scripting XSS issue. This issue affects the area where users submit reservation information. Recommendations: At...