CVE-2023-6075

The CVE-2023-6075 issue affects PHPGurukul Restaurant Table Booking System v1.0, specifically the Reservation Request Handler’s index.php function. The vulnerability is described as a cross-site scripting (XSS) flaw caused by manipulation in an unknown function of index.php, exploitable remotely....

CVE-2023-6074

CVE-2023-6074 affects PHPGurukul Restaurant Table Booking System v1.0, specifically the check-status.php in the Booking Reservation Handler. The vulnerability is a SQL injection stemming from processing in that file, with remote exploitation implied. Connected sources (PT-Security PT-2023-32499, ...

CVE-2023-6075: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in PHPGurukul Restaurant Table Booking System 1.0. Affected is an unknown function of the file index.php of the component Reservation Request Handler. The manipulation leads to cross site scripting. It is possible to launch the attack...

CVE-2023-6074: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPGurukul Restaurant Table Booking System 1.0. It has been rated as critical. This issue affects some unknown processing of the file check-status.php of the component Booking Reservation Handler. The manipulation leads to sql injection. The attack may be initiated...

CVE-2023-6076: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability classified as problematic was found in PHPGurukul Restaurant Table Booking System 1.0. Affected by this vulnerability is an unknown functionality of the file booking-details.php of the component Reservation Status Handler. The manipulation of the argument bid leads to information...

PT-2023-32499 · Unknown · Phpgurukul Restaurant Table Booking System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Restaurant Table Booking System version 1.0 Description: A critical issue affects the processing of the file check-status.php of the component Booking Reservation Handler, leading to sql injection. The attack may be initiated...

Zomato: IDOR to cancel any table booking and leak sensitive information such as email,mobile number,uuid

Hacker is able to cancel the other user's table booking, The same request leaked the private information of the user email & mobile no...