CVE-2025-0529 code-projects Train Ticket Reservation System Login Form stack-based overflow

A vulnerability, which was classified as critical, was found in code-projects Train Ticket Reservation System 1.0. This affects an unknown part of the component Login Form. The manipulation of the argument username leads to stack-based buffer overflow. Attacking locally is a requirement. The...

Yelp: Unauthorized Reservation Cancellation Through IDOR Vulnerability

Vulnerability description not provided...

CVE-2025-0529: Stack-based Buffer Overflow

A vulnerability, which was classified as critical, was found in code-projects Train Ticket Reservation System 1.0. This affects an unknown part of the component Login Form. The manipulation of the argument username leads to stack-based buffer overflow. Attacking locally is a requirement. The...

UBUNTU-CVE-2024-55641

In the Linux kernel, the following vulnerability has been resolved: xfs: unlock inodes when erroring out of xfstransallocdir Debugging a filesystem patch with generic/475 caused the system to hang after observing the following sequences in dmesg: XFS dm-0: metadata I/O error in...

CVE-2024-55641 xfs: unlock inodes when erroring out of xfs_trans_alloc_dir

In the Linux kernel, the following vulnerability has been resolved: xfs: unlock inodes when erroring out of xfstransallocdir Debugging a filesystem patch with generic/475 caused the system to hang after observing the following sequences in dmesg: XFS dm-0: metadata I/O error in...

CVE-2024-55641 xfs: unlock inodes when erroring out of xfs_trans_alloc_dir

In the Linux kernel, the following vulnerability has been resolved: xfs: unlock inodes when erroring out of xfstransallocdir Debugging a filesystem patch with generic/475 caused the system to hang after observing the following sequences in dmesg: XFS dm-0: metadata I/O error in...

CVE-2025-0340

A vulnerability classified as critical was found in code-projects Cinema Seat Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/deleteBooking.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. T...

CVE-2025-0340

A vulnerability classified as critical was found in code-projects Cinema Seat Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/deleteBooking.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. T...

CVE-2025-0340

CVE-2025-0340 affects code-projects Cinema Seat Reservation System 1.0, impacting the /admin/deleteBooking.php functionality. The root cause is an SQL injection triggered by manipulating the id argument, with the vulnerability exploitable remotely and the exploit publicly disclosed. A range of so...

CVE-2025-0340 code-projects Cinema Seat Reservation System deleteBooking.php sql injection

A vulnerability classified as critical was found in code-projects Cinema Seat Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/deleteBooking.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. T...

CVE-2025-0340 code-projects Cinema Seat Reservation System deleteBooking.php sql injection

A vulnerability classified as critical was found in code-projects Cinema Seat Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/deleteBooking.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. T...

Code-Projects Cinema Seat Reservation System Injection Vulnerability

Code-Projects Cinema Seat Reservation System is a Code-Projects open source movie theater seat reservation system. An injection vulnerability exists in Code-Projects Cinema Seat Reservation System version 1.0, which is caused by an SQL injection into the parameter id...

PT-2025-3835 · Code Projects · Cinema Seat Reservation System

Name of the Vulnerable Software and Affected Versions: code-projects Cinema Seat Reservation System version 1.0 Description: A critical issue has been found in the Cinema Seat Reservation System. It affects an unknown functionality of the file /admin/deleteBooking.php. The manipulation of the id...

CVE-2025-0340: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in code-projects Cinema Seat Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/deleteBooking.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. T...

WordPress plugin “Bus Ticket Booking with Seat Reservation” has a cross-site request forgeing vulnerability.

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

PT-2025-2823

Name of the Vulnerable Software and Affected Versions MagePeople Team Bus Ticket Booking with Seat Reservation versions n/a through 5.4.3 Description The issue is related to a Cross-Site Request Forgery CSRF problem, which allows Cross Site Request Forgery. This affects the bus ticket booking...

CVE-2024-49294: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in magepeopleteam Bus Ticket Booking with Seat Reservation bus-ticket-booking-with-seat-reservation allows Cross Site Request Forgery.This issue affects Bus Ticket Booking with Seat Reservation: from n/a through = 5.4.3...

WordPress WpBusTicketly plugin <= 5.4.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Sharanabasappa Patchstack Alliance in WordPress Plugin Bus Ticket Booking with Seat Reservation versions = 5.4.3...

CVE-2023-47647

CVE-2023-47647 corresponds to a Missing Authorization (Broken Access Control) vulnerability in LearningTimes BadgeOS, affecting BadgeOS up to version 3.7.1.6. The issue originates from misconfigured access control levels, enabling unauthorized actions. Reported CVSS 3.1 base score 4.3 (Medium). C...

CVE-2023-47515

CVE-2023-47515 concerns the WordPress plugin “Seers – GDPR & CCPA Cookie Consent & Compliance”. Connected sources confirm a Missing Authorization/Broken Access Control issue affecting Seers versions up to 8.1.1, allowing unauthenticated access to configured security levels. The root cause is insu...