CVE-2025-2061: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in code-projects Online Ticket Reservation System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /passenger.php. The manipulation of the argument name leads to cross site scripting. The attack can be initiated remotely. The...

Code-Projects Online Ticket Reservation System: Code Injection Vulnerabilities

Code-Projects Online Ticket Reservation System is a Code-Projects open source online ticket reservation system. Code-Projects Online Ticket Reservation System version 1.0 suffers from a code injection vulnerability that stems from improper manipulation of the name parameter, which could lead to a...

PT-2025-10032

Name of the Vulnerable Software and Affected Versions code-projects Online Ticket Reservation System version 1.0 Description A vulnerability was found in the code-projects Online Ticket Reservation System. This issue affects unknown code of the file /passenger.php. The manipulation of the name...

CVE-2025-0877

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in AtaksAPP Reservation Management System allows Cross-Site Scripting XSS. This issue affects Reservation Management System: before 4.2.3...

CVE-2025-0877

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in AtaksAPP Reservation Management System allows Cross-Site Scripting XSS. This issue affects Reservation Management System: before 4.2.3...

CVE-2025-0877

CVE-2025-0877 pertains to AtaksAPP Reservation Management System with an XSS vulnerability caused by improper neutralization of input during web page generation. Affected versions are before 4.2.3. The issue is documented across multiple sources (NVD, Red Hat, CVE listings, and risk enrichment) w...

CVE-2025-0877 XSS in AtaksAPP's Reservation Management System

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in AtaksAPP Reservation Management System allows Cross-Site Scripting XSS. This issue affects Reservation Management System: before 4.2.3...

CVE-2025-0877 XSS in AtaksAPP's Reservation Management System

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in AtaksAPP Reservation Management System allows Cross-Site Scripting XSS. This issue affects Reservation Management System: before 4.2.3...

PT-2025-9919

Name of the Vulnerable Software and Affected Versions AtaksAPP Reservation Management System versions prior to 4.2.3 Description The issue affects the AtaksAPP Reservation Management System, allowing Cross-Site Scripting XSS due to improper neutralization of input during web page generation...

AtaksAPP Reservation Management System Cross-site Scripting Vulnerability

AtaksAPP Reservation Management System is a reservation management system from the Turkish company AtaksAPP. A cross-site scripting vulnerability exists in AtaksAPP Reservation Management System versions prior to 4.2.3, which stems from improper input cleanup and could lead to cross-site scriptin...

CVE-2025-0877: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in AtaksAPP Reservation Management System allows Cross-Site Scripting XSS. This issue affects Reservation Management System: before 4.2.3...

select-menu.php Code Execution

The vulnerability of the select-menu.php web system for the online reservation system of the Multi Restaurant Table Reservation System is related to the lack of measures taken to protect the SQL query structure when processing the table parameter. Exploiting this vulnerability allows an attacker ...

SUSE CVE-2022-49327

In the Linux kernel, the following vulnerability has been resolved: bcache: avoid journal no-space deadlock by reserving 1 journal bucket The journal no-space deadlock was reported time to time. Such deadlock can happen in the following situation. When all journal buckets are fully filled by acti...

AZL-68754 CVE-2024-57976 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: btrfs: do proper folio cleanup when cowfilerange failed BUG When testing with COW fixup marked as BUGON this is involved with the new pinuserpages change, which should not result new out-of-band dirty pages, I hit a crash trigger...

CVE-2022-49547

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix deadlock between concurrent dio writes when low on free data space When reserving data space for a direct IO write we can end up deadlocking if we have multiple tasks attempting a write to the same file range, there ar...

CVE-2022-49327 bcache: avoid journal no-space deadlock by reserving 1 journal bucket

In the Linux kernel, the following vulnerability has been resolved: bcache: avoid journal no-space deadlock by reserving 1 journal bucket The journal no-space deadlock was reported time to time. Such deadlock can happen in the following situation. When all journal buckets are fully filled by acti...

CVE-2022-49327 bcache: avoid journal no-space deadlock by reserving 1 journal bucket

In the Linux kernel, the following vulnerability has been resolved: bcache: avoid journal no-space deadlock by reserving 1 journal bucket The journal no-space deadlock was reported time to time. Such deadlock can happen in the following situation. When all journal buckets are fully filled by acti...

CVE-2023-51316

A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Bus Reservation System v1.1 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service DoS via a large amount of generated e-mail messages...

CVE-2023-51318

PHPJabbers Bus Reservation System v1.1 is vulnerable to Multiple Stored Cross-Site Scripting XSS in the "title, name" parameters...

CVE-2023-51319

PHPJabbers Bus Reservation System v1.1 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file...