4244 matches found
CVE-2021-41662: Improper Neutralization of Special Elements used in an SQL Command
The South Gate Inn Online Reservation System v1.0 contains an SQL injection vulnerability that can be chained with a malicious PHP file upload, which is caused by improper file handling in the editImg function. This vulnerability leads to remote code execution...
PT-2022-11459
Name of the Vulnerable Software and Affected Versions The South Gate Inn Online Reservation System version 1.0 Description The issue is caused by improper file handling in the editImg function, leading to an SQL injection vulnerability that can be chained with a malicious PHP file upload. This...
Food-order-and-table-reservation-system SQL Injection Vulnerability
Food-order-and-table-reservation-system is enabling users to order food online and reserve a table for dine-in if there is no delivery option. food-order-and-table-reservation-system version 1.0 is vulnerable to an SQL injection vulnerability that originates in the categorywise-menu.php page wher...
CVE-2022-30481
Food-order-and-table-reservation-system- 1.0 is vulnerable to SQL Injection in categorywise-menu.php via the catid parameters...
Sql injection
Food-order-and-table-reservation-system- 1.0 is vulnerable to SQL Injection in categorywise-menu.php via the catid parameters...
Food-order-and-table-reservation-system SQL注入漏洞
Food-order-and-table-reservation-system is enabling users to order food online and reserve a table for dine-in if there is no delivery option. food-order-and-table-reservation-system version 1.0 is vulnerable to an SQL injection vulnerability that originates in the categorywise-menu.php page wher...
CVE-2022-30481
CVE-2022-30481 affects Food-order-and-table-reservation-system v1.0. The vulnerability is an SQL Injection in categorywise-menu.php via the catid parameter, caused by lack of input validation. Multiple connected sources (CNVD, NVD, Red Hat, CNNVD, etc.) corroborate the flaw and its basic impact, ...
CVE-2022-30481
Food-order-and-table-reservation-system- 1.0 is vulnerable to SQL Injection in categorywise-menu.php via the catid parameters...
CVE-2022-30481: Improper Neutralization of Special Elements used in an SQL Command
Food-order-and-table-reservation-system- 1.0 is vulnerable to SQL Injection in categorywise-menu.php via the catid parameters...
PT-2022-20137 · Unknown · Food-Order-And-Table-Reservation-System
Name of the Vulnerable Software and Affected Versions: Food-order-and-table-reservation-system- version 1.0 Description: The issue concerns a SQL Injection vulnerability in the categorywise-menu.php file, specifically via the catid parameter. This allows for potential exploitation. Recommendation...
CVE-2022-1836
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-33981. Reason: This candidate is a reservation duplicate of CVE-2022-33981. Notes: All CVE users should reference CVE-2022-33981 instead of this candidate. All references and descriptions in this candidate have been removed t...
CVE-2019-1010223
REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-19800. Reason: This candidate is a reservation duplicate of CVE-2018-19800. Notes: All CVE users should reference CVE-2018-19800 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2022-28093
SCBS Online Sports Venue Reservation System v1.0 was discovered to contain a local file inclusion vulnerability which allow attackers to execute arbitrary code via a crafted PHP file...
CVE-2022-28093
SCBS Online Sports Venue Reservation System v1.0 was discovered to contain a local file inclusion vulnerability which allow attackers to execute arbitrary code via a crafted PHP file...
CVE-2022-28094
SCBS Online Sports Venue Reservation System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the fid parameter at booking.php...
CVE-2022-28094
SCBS Online Sports Venue Reservation System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the fid parameter at booking.php...
Cross site scripting
SCBS Online Sports Venue Reservation System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the fid parameter at booking.php...
CVE-2022-28094
SCBS Online Sports Venue Reservation System v1.0 is affected by a cross-site scripting (XSS) vulnerability via the fid parameter in booking.php. Root cause is unvalidated input leading to script execution. The CVE entry documents this issue; exploitation details, affected versions beyond v1.0, an...
CVE-2022-28093
SCBS Online Sports Venue Reservation System v1.0 is affected by a local file inclusion vulnerability that enables attackers to execute arbitrary code via a crafted PHP file. The issue is documented across multiple sources (NVD/Red Hat/CNNVD) as LFI with high severity (CVE-2022-28093). Root cause ...