Lucene search
+L

4244 matches found

CNNVD
CNNVD
•added 2021/01/12 12:00 a.m.•27 views

Open-xchange OX App Suite 跨站脚本漏洞

OX App Suite is a modular platform designed for telcos, hosting companies and vendors to deliver a wide range of cloud-based services. A cross-site scripting vulnerability exists in OX App Suite 7.10.4. The vulnerability can be exploited to conduct cross-site scripting attacks via a "reservation"...

6.1CVSS6.3AI score0.01089EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2021/01/07 3:15 p.m.•15 views

CVE-2020-26773

Restaurant Reservation System 1.0 suffers from an authenticated SQL injection vulnerability, which allows a remote, authenticated attacker to execute arbitrary SQL commands via the date parameter in includes/reservation.inc.php...

8.8CVSS7.6AI score0.01586EPSS
SaveExploits0References2
NVD
NVD
•added 2021/01/07 3:15 p.m.•28 views

CVE-2020-26773

Restaurant Reservation System 1.0 suffers from an authenticated SQL injection vulnerability, which allows a remote, authenticated attacker to execute arbitrary SQL commands via the date parameter in includes/reservation.inc.php...

8.8CVSS9.1AI score0.01586EPSS
SaveExploits0References2
Prion
Prion
•added 2021/01/07 3:15 p.m.•26 views

Sql injection

Restaurant Reservation System 1.0 suffers from an authenticated SQL injection vulnerability, which allows a remote, authenticated attacker to execute arbitrary SQL commands via the date parameter in includes/reservation.inc.php...

6.5CVSS9AI score0.01586EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2021/01/07 2:19 p.m.•50 views

CVE-2020-26773

CVE-2020-26773 affects the Restaurant Reservation System 1.0. It contains an authenticated SQL injection vulnerability that allows a remote, authenticated attacker to execute arbitrary SQL commands via the date parameter in includes/reservation.inc.php. The issue is reported across multiple sourc...

8.8CVSS9AI score0.01586EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2021/01/07 2:19 p.m.•45 views

CVE-2020-26773

Restaurant Reservation System 1.0 suffers from an authenticated SQL injection vulnerability, which allows a remote, authenticated attacker to execute arbitrary SQL commands via the date parameter in includes/reservation.inc.php...

9.1AI score0.01586EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/01/07 12:00 a.m.•8 views

PT-2021-11272

Name of the Vulnerable Software and Affected Versions: Restaurant Reservation System version 1.0 Description: The issue allows a remote, authenticated attacker to execute arbitrary SQL commands via the date parameter in includes/reservation.inc.php. This is an authenticated SQL injection...

8.8CVSS6.3AI score0.01586EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2021/01/07 12:00 a.m.•21 views

Sourcecodester Restaurant Reservation System SQL Injection Vulnerability

Sourcecodester Restaurant Reservation System is a Php-based restaurant reservation system by the individual developer of Sourcecodester. A security vulnerability in Restaurant Reservation System 1.0 allows remote, authenticated attackers to execute arbitrary SQL commands via the date parameter in...

8.8CVSS7.6AI score0.01586EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/01/07 12:00 a.m.•10 views

CVE-2020-26773: Improper Neutralization of Special Elements used in an SQL Command

Restaurant Reservation System 1.0 suffers from an authenticated SQL injection vulnerability, which allows a remote, authenticated attacker to execute arbitrary SQL commands via the date parameter in includes/reservation.inc.php...

8.8CVSS6.3AI score0.01586EPSS
SaveExploits0References2
Prion
Prion
•added 2020/12/24 3:15 p.m.•31 views

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-29189. Reason: This candidate is a reservation duplicate of CVE-2020-29189. Notes: All CVE users should reference CVE-2020-29189 instead of this candidate. All references and descriptions in this candidate have been removed t...

8AI score0.01888EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2020/12/22 12:00 a.m.•27 views

Online Bus Ticket Reservation Project SQL Injection (CVE-2020-35378)

An SQL injection vulnerability exists in Online Bus Ticket Reservation. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

7.5CVSS5.4AI score0.0205EPSS
SaveExploits1
Prion
Prion
•added 2020/12/17 2:15 a.m.•32 views

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-5021. Reason: This candidate is a reservation duplicate of CVE-2019-5021. Notes: All CVE users should reference CVE-2019-5021 instead of this candidate. All references and descriptions in this candidate have been removed to...

9.3AI score0.06263EPSS
SaveExploits2
osv_cve
osv_cve
•added 2020/12/14 4:15 p.m.•16 views

CVE-2020-35378

SQL Injection in the login page in Online Bus Ticket Reservation 1.0 allows attackers to execute arbitrary SQL commands and bypass authentication via the username and password fields...

9.8CVSS6.1AI score0.0205EPSS
SaveExploits1References1
NVD
NVD
•added 2020/12/14 4:15 p.m.•22 views

CVE-2020-35378

SQL Injection in the login page in Online Bus Ticket Reservation 1.0 allows attackers to execute arbitrary SQL commands and bypass authentication via the username and password fields...

9.8CVSS10AI score0.0205EPSS
SaveExploits1References1
CVE
CVE
•added 2020/12/14 3:44 p.m.•60 views

CVE-2020-35378

CVE-2020-35378 affects Online Bus Ticket Reservation 1.0. The login page is vulnerable to SQL injection via username/password fields, enabling arbitrary SQL execution and authentication bypass. Root cause appears to be lack of input validation on SQL statements. Affected version: 1.0. No remediat...

9.8CVSS10AI score0.0205EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2020/12/14 3:44 p.m.•28 views

CVE-2020-35378

SQL Injection in the login page in Online Bus Ticket Reservation 1.0 allows attackers to execute arbitrary SQL commands and bypass authentication via the username and password fields...

10AI score0.0205EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2020/12/14 12:00 a.m.•24 views

Sourcecodester Online Bus Ticket Reservation SQL注入漏洞

Sourcecodester Online Bus Ticket Reservation is an online bus ticketing platform from Sourcecodester USA. A SQL injection vulnerability exists in Online Bus Ticket Reservation version 1.0, which stems from a database-based application that lacks validation of externally-entered SQL statements. An...

9.8CVSS7.6AI score0.0205EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/14 12:00 a.m.•7 views

CVE-2020-35378: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection in the login page in Online Bus Ticket Reservation 1.0 allows attackers to execute arbitrary SQL commands and bypass authentication via the username and password fields...

9.8CVSS6.3AI score0.0205EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2020/12/14 12:00 a.m.•1 views

PT-2020-17319

Name of the Vulnerable Software and Affected Versions Online Bus Ticket Reservation version 1.0 Description The issue allows attackers to execute arbitrary SQL commands and bypass authentication via the username and password fields in the login page. Recommendations For Online Bus Ticket...

9.8CVSS0.0205EPSS
SaveExploits1References4
Prion
Prion
•added 2020/12/11 4:15 p.m.•32 views

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-5021. Reason: This candidate is a reservation duplicate of CVE-2019-5021. Notes: All CVE users should reference CVE-2019-5021 instead of this candidate. All references and descriptions in this candidate have been removed to...

9.3AI score0.06263EPSS
SaveExploits2
Rows per page
Query Builder