4253 matches found
CVE-2024-29806
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Reservation Diary ReDi Restaurant Reservation allows Reflected XSS.This issue affects ReDi Restaurant Reservation: from n/a through 24.0128...
CVE-2024-9811
A vulnerability classified as critical has been found in code-projects Restaurant Reservation System 1.0. This affects an unknown part of the file filter3.php. The manipulation of the argument company leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...
CVE-2024-9085
A vulnerability was found in code-projects Restaurant Reservation System 1.0. It has been rated as critical. This issue affects some unknown processing of the file index.php. The manipulation of the argument date leads to sql injection. The attack may be initiated remotely. The exploit has been...
CVE-2024-9360
A vulnerability was found in code-projects Restaurant Reservation System 1.0. It has been classified as critical. This affects an unknown part of the file /updatebal.php. The manipulation of the argument company leads to sql injection. It is possible to initiate the attack remotely. The exploit h...
CVE-2024-9359
A vulnerability was found in code-projects Restaurant Reservation System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /addcompany.php. The manipulation of the argument company leads to sql injection. The attack may be launched remotely. The...
CVE-2024-6115
A vulnerability classified as critical was found in itsourcecode Simple Online Hotel Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file addroom.php. The manipulation of the argument photo leads to unrestricted upload. The attack can be launched remotely...
CVE-2024-6308
A vulnerability was found in itsourcecode Simple Online Hotel Reservation System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file index.php. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The exploi...
CVE-2024-6116
A vulnerability, which was classified as critical, has been found in itsourcecode Simple Online Hotel Reservation System 1.0. Affected by this issue is some unknown functionality of the file editroom.php. The manipulation of the argument photo leads to unrestricted upload. The attack may be...
CVE-2024-6084
A vulnerability has been found in itsourcecode Pool of Bethesda Online Reservation System up to 1.0 and classified as critical. Affected by this vulnerability is the function uploadImage of the file /admin/modroom/controller.php?action=add. The manipulation of the argument image leads to...
CVE-2024-31299
Cross-Site Request Forgery CSRF vulnerability in Reservation Diary ReDi Restaurant Reservation allows Cross-Site Scripting XSS.This issue affects ReDi Restaurant Reservation: from n/a through 24.0128...
CVE-2024-8168
A vulnerability was found in code-projects Online Bus Reservation Site 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file login.php. The manipulation of the argument Username leads to sql injection. The attack can be launched remotely. Th...
CVE-2022-28653
A security vulnerability exists in Canonical Apport prior to version 2.21.0 . The flaw allows users to consume unlimited disk space in the /var/crash directory, which is used to collect and feed back error messages from application crashes. A vulnerability scanner identifies this as a package-lev...
CVE-2023-6195
CVE-2023-6195 is a GitLab SSRF issue in GitLab CE/EE affecting all versions from 15.5 before 16.9.7, 16.10 before 16.10.5, and 16.11 before 16.11.2. The root cause is a Server-Side Request Forgery triggered when an attacker supplies a malicious URL in the markdown image value during GitHub reposi...
PT-2025-5503 · Wpchill · Wpchill Rsvp/Event Management Plugin
Name of the Vulnerable Software and Affected Versions: WPChill RSVP and Event Management Plugin versions n/a through 2.7.14 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection...
CVE-2018-9464
CVE-2018-9464 is an Elevation of Privilege (EoP) vulnerability affecting the Taimen bootloader component within the Google Android Kernel . The root cause is a missing permission check in multiple locations, which allows an attacker to read protected files. This flaw can be exploited to achieve l...
CVE-2025-0529
A vulnerability, which was classified as critical, was found in code-projects Train Ticket Reservation System 1.0. This affects an unknown part of the component Login Form. The manipulation of the argument username leads to stack-based buffer overflow. Attacking locally is a requirement. The...
CVE-2025-0529
A vulnerability, which was classified as critical, was found in code-projects Train Ticket Reservation System 1.0. This affects an unknown part of the component Login Form. The manipulation of the argument username leads to stack-based buffer overflow. Attacking locally is a requirement. The...
CVE-2025-0529 code-projects Train Ticket Reservation System Login Form stack-based overflow
A vulnerability, which was classified as critical, was found in code-projects Train Ticket Reservation System 1.0. This affects an unknown part of the component Login Form. The manipulation of the argument username leads to stack-based buffer overflow. Attacking locally is a requirement. The...
CVE-2025-0529
CVE-2025-0529 affects code-projects Train Ticket Reservation System 1.0, specifically the Login Form component. The vulnerability is a stack-based overflow triggered by tampering with the username parameter, requiring local access to exploit. The CVE entry notes that the exploit has been disclose...
CVE-2025-0529 code-projects Train Ticket Reservation System Login Form stack-based overflow
A vulnerability, which was classified as critical, was found in code-projects Train Ticket Reservation System 1.0. This affects an unknown part of the component Login Form. The manipulation of the argument username leads to stack-based buffer overflow. Attacking locally is a requirement. The...