32 matches found
CVE-2026-36923
Sourcecodester Cab Management System 1.0 is vulnerable to SQL Injection in the file /cms/admin/bookings/viewbooking.php...
EUVD-2026-21924
Sourcecodester Cab Management System 1.0 is vulnerable to SQL Injection in the file /cms/admin/bookings/viewbooking.php...
CVE-2026-36923
Sourcecodester Cab Management System 1.0 is vulnerable to SQL Injection in the file /cms/admin/bookings/viewbooking.php...
SourceCodester Cab Management System 安全漏洞
SourceCodester Cab Management System is an open-source taxi management system developed by SourceCodester. Version 1.0 of the SourceCodester Cab Management System has a security vulnerability, which stems from SQL injection in the /cms/admin/bookings/viewbooking.php file...
CVE-2026-36923
The Sourcecodester Cab Management System 1.0 is vulnerable to SQL Injection within the /cms/admin/bookings/view_booking.php file. This vulnerability allows for the improper neutralization of special elements used in an SQL command. No specific exploit details or remediation instructions are provi...
CVE-2026-36923
Sourcecodester Cab Management System 1.0 is vulnerable to SQL Injection in the file /cms/admin/bookings/viewbooking.php...
EUVD-2021-29203
Malicious code in bioql PyPI...
CVE-2025-50695: Improper Neutralization of Input During Web Page Generation
PHPGurukul Online DJ Booking Management System 2.0 is vulnerable to Cross Site Scripting XSS in /admin/view-booking-detail.php and /admin/invoice-generating.php...
PHPGurukul Online DJ Booking Management System 安全漏洞
PHPGurukul Online DJ Booking Management System is an online DJ booking management system from PHPGurukul Inc. A security vulnerability exists in PHPGurukul Online DJ Booking Management System version 2.0, which originates from cross-site scripting in /admin/view-booking-detail.php and...
CVE-2025-4691: Authorization Bypass Through User-Controlled Key
The Free Booking Plugin for Hotels, Restaurants and Car Rentals – eaSYNC Booking plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.3.21 via the 'viewrequestdetails' due to missing validation on a user controlled key. This makes it...
DRUPAL-CONTRIB-2025-070
This module enables you to setup a repeating date rule that users can "book" different dates, allowing you to let users register for a variety of different things like conference rooms or guitar lessons. This module has a permission of "view booking" and "view booking contact" which allows you to...
CVE-2023-2410
A vulnerability has been found in SourceCodester AC Repair and Services System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/bookings/viewbooking.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The...
CVE-2021-42223
Cross Site Scripting XSS.vulnerability exists in Online DJ Booking Management System 1.0 in view-booking-detail.php...
CVE-2023-5303
A vulnerability, which was classified as problematic, was found in Online Banquet Booking System 1.0. Affected is an unknown function of the file /view-booking-detail.php of the component Account Detail Handler. The manipulation of the argument username leads to cross site scripting. It is possib...
PT-2023-32023 · Unknown · Online Banquet Booking System
Name of the Vulnerable Software and Affected Versions: Online Banquet Booking System version 1.0 Description: A problematic issue was found in the Online Banquet Booking System, affecting an unknown function of the file /view-booking-detail.php of the component Account Detail Handler. The...
Vulnerability of the /admin/bookings/view_booking.php script of the SourceCodester AC Repair and Services system, allowing a hacker to execute arbitrary SQL code
The vulnerability in the “/admin/bookings/viewbooking.php” script of the SourceCodester AC Repair and Services system relates to the lack of protective measures for the SQL query structure when processing the parameter “tomail=&groupid=”. Exploiting this vulnerability allows an attacker to execut...
CVE-2023-2410
A vulnerability has been found in SourceCodester AC Repair and Services System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/bookings/viewbooking.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The...
PT-2023-2942 · Sourcecodester · Sourcecodester Ac Repair/Services System
Name of the Vulnerable Software and Affected Versions: SourceCodester AC Repair and Services System version 1.0 Description: A critical issue has been found in the system, affecting the /admin/bookings/view booking.php file. The manipulation of the id argument leads to SQL injection. This can be...
