CVE-2021-38758

Directory traversal vulnerability in Online Catering Reservation System 1.0 exists due to lack of validation in index.php...

CVE-2021-38758

Directory traversal vulnerability in Online Catering Reservation System 1.0 exists due to lack of validation in index.php...

CVE-2021-38758

CVE-2021-38758 affects the Online Catering Reservation System 1.0. The vulnerability is a directory traversal due to lack of validation in index.php, allowing access to restricted files as described in the CVE entry. NVD lists CVSS v3.1 base score 7.5 (Network, Low complexity, No privileges, No u...

CVE-2021-38752

CVE-2021-38752 is an XSS vulnerability in the Online Catering Reservation System (PHP, Sourcecodester). The issue occurs in the search bar where user input is not properly sanitized, allowing an attacker to arbitrarily inject code in the search functionality. CVSS metrics: AV:N/AC:L/PR:L/UI:R/S:C...

Online-Catering-Reservation 跨站脚本漏洞

A code injection vulnerability exists in Online-Catering-Reservation, an online catering reservation system. The vulnerability stems from a cross-site scripting XSS vulnerability in Online-Catering-Reservation, which allows an attacker to search bar...

PT-2021-22281

Name of the Vulnerable Software and Affected Versions Online Catering Reservation System using PHP on Sourcecodester affected versions not specified Description A cross-site scripting XSS issue allows an attacker to inject code in the search bar. This could potentially lead to unauthorized action...

CVE-2021-38758: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Online Catering Reservation System 1.0 exists due to lack of validation in index.php...

PT-2021-22287

Name of the Vulnerable Software and Affected Versions Online Catering Reservation System version 1.0 Description The issue is related to a directory traversal vulnerability due to a lack of validation in the index.php file. This allows for potential unauthorized access to sensitive files and...

CVE-2021-38752: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in Online Catering Reservation System using PHP on Sourcecodester allows an attacker to arbitrarily inject code in the search bar...

Cross site scripting

TastyIgniter 3.0.7 allows XSS via /account, /reservation, /admin/dashboard, and /admin/systemlogs...

CVE-2021-38699

TastyIgniter 3.0.7 allows XSS via /account, /reservation, /admin/dashboard, and /admin/systemlogs...

CVE-2021-38699

TastyIgniter 3.0.7 allows XSS via /account, /reservation, /admin/dashboard, and /admin/systemlogs...

CVE-2021-38699: Improper Neutralization of Input During Web Page Generation

TastyIgniter 3.0.7 allows XSS via /account, /reservation, /admin/dashboard, and /admin/systemlogs...

Tastylgniter 跨站脚本漏洞

TastyIgniter is a free open source restaurant online ordering system based on Laravel PHP Framework. A cross-site scripting vulnerability exists in Tastylgniter 3.0.7, which originates from the lack of validation of user-submitted data in the /account, /reservation, /admin/dashboard, and...

PT-2021-22261

Name of the Vulnerable Software and Affected Versions TastyIgniter version 3.0.7 Description The issue allows for XSS attacks via several endpoints, including "/account", "/reservation", "/admin/dashboard", and "/admin/system logs". Recommendations For TastyIgniter version 3.0.7, consider...

CVE-2021-37646

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of tf.rawops.StringNGrams is vulnerable to an integer overflow issue caused by converting a signed integer value to an unsigned one and then allocating memory based on this value. The...

Online Hotel Reservation System 1.0 Cross Site Scripting

Exploit Title: Online Hotel Reservation System 1.0 - 'Multiple' Cross-site scripting XSS Date: 2021-08-02 Exploit Author: Mohammad Koochaki Vendor Homepage: https://www.sourcecodester.com/php/13492/online-hotel-reservation-system-phpmysqli.html Software Link:...

Online Hotel Reservation System 1.0 - 'Multiple' Cross-site scripting (XSS)

Exploit Title: Online Hotel Reservation System 1.0 - 'Multiple' Cross-site scripting XSS Date: 2021-08-02 Exploit Author: Mohammad Koochaki Vendor Homepage: https://www.sourcecodester.com/php/13492/online-hotel-reservation-system-phpmysqli.html Software Link:...

Online Hotel Reservation System 1.0 - (Multiple) Cross-site scripting Vulnerability

Exploit Title: Online Hotel Reservation System 1.0 - 'Multiple' Cross-site scripting XSS Exploit Author: Mohammad Koochaki Vendor Homepage: https://www.sourcecodester.com/php/13492/online-hotel-reservation-system-phpmysqli.html Software Link:...

PT-2021-5324

Name of the Vulnerable Software and Affected Versions Sourcecodester Online Event Booking and Reservation System affected versions not specified Description A Stored Cross Site Scripting XSS issue exists due to inadequate protection of the web page structure. This allows a remote attacker to run...