4244 matches found
CVE-2021-41511
The username and password field of login in Lodging Reservation Management System V1 can give access to any user by using SQL injection to bypass authentication...
CVE-2021-41511
CVE-2021-41511 describes an SQL injection in the login fields of Lodging Reservation Management System V1 that can bypass authentication and grant access to arbitrary users. Root cause: unsafe input handling in username/password fields leading to SQL injection. Impact: authentication bypass with ...
CVE-2021-41511
The username and password field of login in Lodging Reservation Management System V1 can give access to any user by using SQL injection to bypass authentication...
PT-2021-23317
Name of the Vulnerable Software and Affected Versions Lodging Reservation Management System version V1 Description The issue allows unauthorized access to any user by exploiting SQL injection in the username and password fields of the login functionality. This enables bypassing authentication,...
CVE-2021-41511: Improper Neutralization of Special Elements used in an SQL Command
The username and password field of login in Lodging Reservation Management System V1 can give access to any user by using SQL injection to bypass authentication...
Lodging Reservation Management System SQL注入漏洞
Lodging Reservation Management System is an open source accommodation reservation management system that is vulnerable to attackers using SQL injection to bypass authentication via username and password fields to grant any user access to privileges...
Lodging Reservation Management System 1.0 - Authentication Bypass
Exploit Title: Lodging Reservation Management System 1.0 - Authentication Bypass Date: 2021-09-20 Exploit Author: Nitin Sharmavidvansh Vendor Homepage: https://www.sourcecodester.com/php/14883/lodging-reservation-management-system-php-free-source-code.html Software Link:...
Exploit for SQL Injection in Lodging_Reservation_Management_System_Project Lodging_Reservation_Management_System
CVE-2021-41511 Exploit Title: Lodging Reservation Manageme...
CVE-2021-37418
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-31874. Reason: This candidate is a reservation duplicate of CVE-2021-31874. Notes: All CVE users should reference CVE-2021-31874 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2021-37418
CVE-2021-37418 is a duplicate/reserved entry for CVE-2021-31874. Connected sources confirm the underlying issue affects Zoho ManageEngine ADSelfService Plus prior to 6104, where, in rare situations, an information disclosure vulnerability could allow an attacker to obtain sensitive information fr...
CVE-2021-3587
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-38208. Reason: This candidate is a reservation duplicate of CVE-2021-38208. Notes: All CVE users should reference CVE-2021-38208 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
Online-Catering-Reservation Code Injection Vulnerability
A code injection vulnerability exists in Online-Catering-Reservation, an online catering reservation system. The vulnerability stems from a cross-site scripting XSS vulnerability in Online-Catering-Reservation, which allows an attacker to search bar...
Online Catering Reservation System has an unspecified vulnerability
Online Catering Reservation System is an open source online catering reservation system. Online Catering Reservation System is vulnerable due to a lack of validation in index.php leading to a directory traversal vulnerability. An attacker could use this vulnerability to obtain sensitive informati...
CVE-2021-34407
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-30480. Reason: This candidate is a reservation duplicate of CVE-2021-30480. Notes: All CVE users should reference CVE-2021-30480 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2021-34407
CVE-2021-34407 is a reservation/duplicate entry for CVE-2021-30480. The connected CVE-2021-30480 details indicate that Zoom Chat on Windows and macOS prior to 2021-04-09 allows remote authenticated attackers within the same organization (or an accepted contact) to execute arbitrary code without u...
CVE-2021-38758
Directory traversal vulnerability in Online Catering Reservation System 1.0 exists due to lack of validation in index.php...
CVE-2021-38758
Directory traversal vulnerability in Online Catering Reservation System 1.0 exists due to lack of validation in index.php...
CVE-2021-38752
A cross-site scripting XSS vulnerability in Online Catering Reservation System using PHP on Sourcecodester allows an attacker to arbitrarily inject code in the search bar...
