CVE-2022-28001

The CVE-2022-28001 entry corresponds to a SQL injection vulnerability in Movie Seat Reservation v1. The flaw is triggered via the id parameter in /index.php?page=reserve, enabling attackers to manipulate SQL queries due to improper input handling. Public sources in the connected set include PoCs ...

CVE-2022-28002: Files or Directories Accessible to External Parties

Movie Seat Reservation v1 was discovered to contain an unauthenticated file disclosure vulnerability via /index.php?page=home...

CVE-2022-28001: Improper Neutralization of Special Elements used in an SQL Command

Movie Seat Reservation v1 was discovered to contain a SQL injection vulnerability at /index.php?page=reserve via the id parameter...

PT-2022-18741

Name of the Vulnerable Software and Affected Versions Movie Seat Reservation version 1 Description The issue is related to a SQL injection vulnerability. It affects the "/index.php?page=reserve" API endpoint via the id parameter. Recommendations For Movie Seat Reservation version 1, as a temporar...

PT-2022-18742

Name of the Vulnerable Software and Affected Versions Movie Seat Reservation version 1 Description The issue is related to an unauthenticated file disclosure vulnerability. This vulnerability can be exploited via the "/index.php?page=home" API endpoint. Recommendations For Movie Seat Reservation...

Seat Reservation System SQL注入漏洞

Movie Seat Reservation System is a seat reservation system from an individual developer.Movie Seat Reservation System is vulnerable to SQL injection, which can be exploited by attackers to execute malicious SQL commands...

Seat Reservation System安全漏洞

Seat Reservation System is a seat reservation system for individual developers. A security vulnerability exists in Movie Seat Reservation v1, which stems from a lack of authentication and file restrictions in /index.php?page=home, leading to file disclosure...

CVE-2022-1072

CVE-2022-1072 is a reserved candidate; however, connected records identify CVE-2022-26254 as the active entry. The affected software is WoWonder The Ultimate PHP Social Network Platform v4.0.0, which contains an access control flaw allowing unauthenticated attackers to arbitrarily rename group ID...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-27666. Reason: This candidate is a reservation duplicate of CVE-2022-27666. Notes: All CVE users should reference CVE-2022-27666 instead of this candidate. All references and descriptions in this candidate have been removed t...

UBUNTU-CVE-2022-0886

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-27666. Reason: This candidate is a reservation duplicate of CVE-2022-27666. Notes: All CVE users should reference CVE-2022-27666 instead of this candidate. All references and descriptions in this candidate have been removed t...

CVE-2022-26351

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-26320. Reason: This candidate is a reservation duplicate of CVE-2022-26320. Notes: All CVE users should reference CVE-2022-26320 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2022-26351

CVE-2022-26351 is a rejected/duplicate candidate and does not represent an active vulnerability entry; refer to CVE-2022-26320.

CVE-2022-24727

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-23915. Reason: This candidate is a reservation duplicate of CVE-2022-23915. Notes: All CVE users should reference CVE-2022-23915 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

WordPress Court Reservation – Manage Your Court Bookings Online plugin <= 1.6.0 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Court Reservation – Manage Your Court Bookings Online plugin versions = 1.6.0. Solution Update the WordPress Court Reservation – Manage Your Court Bookings Online plugin to the latest available version at least 1.6.1...

WordPress Court Reservation – Manage Your Court Bookings Online plugin <= 1.6.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Court Reservation – Manage Your Court Bookings Online plugin versions = 1.6.0. Solution Update the WordPress Court Reservation – Manage Your Court Bookings Online plugin to the latest available version...

GSD-2022-1000619 i40e: Fix queues reservation for XDP

i40e: Fix queues reservation for XDP This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.5 by commit 4b3aa858268b7b9aeef02e5f9c4cd8f8fac101c8,...

PT-2022-28893

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v3.12 through v5.16.4 Description The issue concerns a problem with queues reservation for XDP in the i40e driver. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

CVE-2017-1095

CVE-2017-1095 affects IBM Jazz Reporting Service’s Lifecycle Query Engine (LQE). The IBM Security Bulletin reports a cross-site scripting vulnerability in JRS, enabling a user to embed arbitrary JavaScript in the Web UI and potentially disclose credentials within a trusted session. Affected produ...

CVE-2019-4223

IBM OpenPages GRC Platform is affected by an information-disclosure vulnerability tracked as CVE-2019-4223. The issue affects IBM OpenPages GRC Platform version 8.0 and allows disclosure of detailed error messages in WebApplication and API responses. Remediation provided by IBM fixes are availabl...

CVE-2020-29754

CVE-2020-29754 is a privilege escalation vulnerability in IBM WebSphere Application Server shipped with IBM Security Identity Manager (ISIM). Affected ISIM versions: 6.0.0 and 6.0.2. Affected WAS versions: WAS 7.0 and 8.5 for ISIM 6.0.0; WAS 9 for ISIM 6.0.2. Remediation/fixes are listed in the b...