CVE-2021-36628

CVE-2021-36628 is a reservation duplicate of CVE-2021-40680; however, the connected records provide concrete details for CVE-2021-40680: there is a Directory Traversal vulnerability in Artica Proxy via the filename parameter to /cgi-bin/main.cgi. Affected are Artica Proxy versions 4.30.000000 SP2...

CVE-2022-28094: Improper Neutralization of Input During Web Page Generation

SCBS Online Sports Venue Reservation System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the fid parameter at booking.php...

PT-2022-18805

Name of the Vulnerable Software and Affected Versions SCBS Online Sports Venue Reservation System version 1.0 Description The SCBS Online Sports Venue Reservation System contains a local file inclusion issue, allowing attackers to execute arbitrary code through a crafted PHP file. Recommendations...

CVE-2022-28093: Undefined Security Weakness

SCBS Online Sports Venue Reservation System v1.0 was discovered to contain a local file inclusion vulnerability which allow attackers to execute arbitrary code via a crafted PHP file...

PT-2022-18806

Name of the Vulnerable Software and Affected Versions SCBS Online Sports Venue Reservation System version 1.0 Description The SCBS Online Sports Venue Reservation System contains a cross-site scripting XSS issue. This is due to the fid parameter at the "booking.php" endpoint. Recommendations For...

CVE-2022-29280

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-28366. Reason: This candidate is a reservation duplicate of CVE-2022-28366. Notes: All CVE users should reference CVE-2022-28366 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2022-29280

CVE-2022-29280 is a reservation duplicate of CVE-2022-28366 and is not a separate active vulnerability entry; the connected details show the underlying issue in HtmlUnit-NekoHtml/ CyberNeko HTML: a denial-of-service via crafted Processing Instruction input causing heap memory consumption. Affecte...

CVE-2014-1197

CVE-2014-1197 concerns GNU Cpio 2.11 where the --no-absolute-filenames option can be bypassed via symlinks during extraction, allowing rogue archives to write files outside the current directory. Mageia MGASA-2015-0080 documents this issue (CVE-2014-1197) and references a fix in updated cpio pack...

Movie Seat Reservation System SQL Injection Vulnerability

Movie Seat Reservation System is a seat reservation system from an individual developer.Movie Seat Reservation System is vulnerable to SQL injection, which can be exploited by attackers to execute malicious SQL commands...

CVE-2022-27458

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-27447. Reason: This candidate is a reservation duplicate of CVE-2022-27447. Notes: All CVE users should reference CVE-2022-27447 instead of this candidate...

CVE-2022-28001

Movie Seat Reservation v1 was discovered to contain a SQL injection vulnerability at /index.php?page=reserve via the id parameter...

CVE-2022-28002

Movie Seat Reservation v1 was discovered to contain an unauthenticated file disclosure vulnerability via /index.php?page=home...

CVE-2022-28001

Movie Seat Reservation v1 was discovered to contain a SQL injection vulnerability at /index.php?page=reserve via the id parameter...

CVE-2022-28002

Movie Seat Reservation v1 was discovered to contain an unauthenticated file disclosure vulnerability via /index.php?page=home...

CVE-2022-28001

Movie Seat Reservation v1 was discovered to contain a SQL injection vulnerability at /index.php?page=reserve via the id parameter...

CVE-2022-28002

Movie Seat Reservation v1 was discovered to contain an unauthenticated file disclosure vulnerability via /index.php?page=home...

Sql injection

Movie Seat Reservation v1 was discovered to contain a SQL injection vulnerability at /index.php?page=reserve via the id parameter...

CVE-2022-28002

Movie Seat Reservation v1 was discovered to contain an unauthenticated file disclosure vulnerability via /index.php?page=home...

CVE-2022-28002

CVE-2022-28002 corresponds to a vulnerability in Movie Seat Reservation v1 described as an unauthenticated file disclosure via /index.php?page=home. Connected sources corroborate: the issue stems from lack of authentication and file restrictions, enabling disclosure of confidential files through ...

CVE-2022-28001

Movie Seat Reservation v1 was discovered to contain a SQL injection vulnerability at /index.php?page=reserve via the id parameter...