CVE-2026-62735

CVE-2026-62735 Information This vulnerability was originally discovered by Siyeon Wi. I reproduced the vulnerability independently for educational and case-study purposes. The vulnerability was also demonstrated at Pwn2Own Berlin 2026. References: TrendAI Zero Day Initiative status TrendAI Zero D...

CVE-2021-41651

CVE-2021-41651 CVE-2021-41651 SQL-инъекция в hotel-mgmt-system hotel-mgmt-system уязвим для неаутентифицированной атаки time-based blind SQL-инъекции. Параметр cid на странице /processupdateprofile.php не санирует пользовательский ввод, что позволяет злоумышленнику извлекать конфиденциальные данн...

CVE-2026-105469

A vulnerability was determined in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This vulnerability affects unknown code of the file gettown.php of the component AJAX Endpoint. Executing a manipulation of the argument countryid/townid/cid/didval/cidv...

CVE-2026-105470

A vulnerability was identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This issue affects the function mysqliquery of the file locateus.php of the component Doctor Search Endpoint. The manipulation of the argument doctorname leads to sql...

CVE-2021-43471

CVE-2021-43471 Canon 프린터에 대한 무단 접근으로 인한 서비스 거부 취약점 영향 제품: LBP223 시간: 2021.11.3 시스템 관리자 모드 로그인에는 계정 비밀번호나 PIN이 필요하지 않습니다. 공격자는 백그라운드에 진입한 후 원격으로 장치를 종료하여 서비스 거부 취약점을 발생시킬 수 있습니다...

CVE-2026-105471

A SQL injection vulnerability exists in the Registration Handler component of the girishsaraf Online-Appointment-Booking-System (up to commit f427b4757128ca253d33d0cc4e87bbb9c999a4d5). The flaw is located in an unknown function within the signup.php file, where manipulating the fname argument all...

CVE-2026-105471 girishsaraf Online-Appointment-Booking-System Registration signup.php sql injection

A security flaw has been discovered in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Impacted is an unknown function of the file signup.php of the component Registration Handler. The manipulation of the argument fname results in sql injection. The...

CVE-2026-105471 girishsaraf Online-Appointment-Booking-System Registration signup.php sql injection

A security flaw has been discovered in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Impacted is an unknown function of the file signup.php of the component Registration Handler. The manipulation of the argument fname results in sql injection. The...

CVE-2026-105471 girishsaraf Online-Appointment-Booking-System Registration signup.php sql injection

A security flaw has been discovered in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Impacted is an unknown function of the file signup.php of the component Registration Handler. The manipulation of the argument fname results in sql injection. The...

CVE-2023-43144

CVE-2023-43144 Описание Assets Management System 1.0 подвержен SQL-инъекции через параметр id в delete.php PoC sqlmap -u 'http://localhost/delete.php?id=4' --cookie="PHPSESSID=SESSID" --dbms=MySQL --dbs --batch Обзор кода delete.php ?php include 'core/init.php'; $id = $GET'id'; deletedata$con,$id...

CVE-2025-25965

CVE-2025-25965: Межсайтовая подделка запроса CSRF в Online Banquet Booking System v1.2 Введение Межсайтовая подделка запроса CSRF остается одной из наиболее недооцененных, но опасных уязвимостей, затрагивающих современные веб-приложения. CVE-2025-25965 — это недавно обнаруженная CSRF-уязвимость в...

CVE-2023-49547

CVE-2023-49547 Customer Support System 1.0 - Обход входа через SQL-инъекцию Описание : Customer Support System версии 1.0 уязвим к SQL-инъекциям. Уязвимость SQL-инъекции в Customer Support System 1.0 позволяет удаленным неаутентифицированным злоумышленникам обойти процесс аутентификации, использу...

CVE-2024-10448

영향받는 버전: BloodBank Management System : 1.0 취약점 정보: 취약점 유형: 사이트 간 요청 위조 CSRF 심각도: 높음 상태: 패치되지 않음 취약한 엔드포인트: 경로: /file/delete.php?bid= 취약점 설명: BloodBank Management System의 혈액 요청 기능 에서 사이트 간 요청 위조CSRF 취약점이 발견되었습니다. 이 결함은 이 경로 /file/delete.php?bid=로 delete 요청을 보낼 때 발생하며, bid 매개변수를 통해 애플리케이션에서 삭제할 레코드...

CVE-2026-105470 girishsaraf Online-Appointment-Booking-System Doctor Search Endpoint locateus.php mysqli_query sql injection

A vulnerability was identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This issue affects the function mysqliquery of the file locateus.php of the component Doctor Search Endpoint. The manipulation of the argument doctorname leads to sql...

CVE-2026-105470

The girishsaraf Online-Appointment-Booking-System (up to commit f427b4757128ca253d33d0cc4e87bbb9c999a4d5 ) is vulnerable to a SQL injection in the Doctor Search Endpoint component. The flaw exists within the mysqli_query function of the locateus.php file, where improper handling of the doctorname...

CVE-2026-105470 girishsaraf Online-Appointment-Booking-System Doctor Search Endpoint locateus.php mysqli_query sql injection

A vulnerability was identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This issue affects the function mysqliquery of the file locateus.php of the component Doctor Search Endpoint. The manipulation of the argument doctorname leads to sql...

CVE-2026-105468

A vulnerability was found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects the function mysqliquery of the file Admin/mlogin.php of the component Login Handler. Performing a manipulation of the argument uname/pass results in sql...

CVE-2026-105469 girishsaraf Online-Appointment-Booking-System AJAX Endpoint get_town.php sql injection

A vulnerability was determined in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This vulnerability affects unknown code of the file gettown.php of the component AJAX Endpoint. Executing a manipulation of the argument countryid/townid/cid/didval/cidv...

CVE-2026-105469 girishsaraf Online-Appointment-Booking-System AJAX Endpoint get_town.php sql injection

A vulnerability was determined in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This vulnerability affects unknown code of the file gettown.php of the component AJAX Endpoint. Executing a manipulation of the argument countryid/townid/cid/didval/cidv...

CVE-2026-105469

The girishsaraf Online-Appointment-Booking-System contains a SQL injection vulnerability within the AJAX Endpoint component, specifically affecting the get_town.php file. The flaw is triggered by manipulating the countryid , townid , cid , didval , or cidval arguments. This vulnerability can be e...