Lucene search
+L

12 matches found

RedhatCVE
RedhatCVE
•added 2026/03/10 2:12 a.m.•14 views

CVE-2026-3771

A vulnerability has been found in SourceCodester/janobe Resort Reservation System 1.0. This vulnerability affects unknown code of the file /accomodation.php. Such manipulation of the argument q leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to the...

8.8CVSS6.4AI score0.00491EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2026/03/08 10:15 p.m.•19 views

CVE-2026-3771

A vulnerability has been found in SourceCodester/janobe Resort Reservation System 1.0. This vulnerability affects unknown code of the file /accomodation.php. Such manipulation of the argument q leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to the...

8.8CVSS6.3AI score0.00491EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2026/03/08 9:32 p.m.•56 views

CVE-2026-3771 SourceCodester/janobe Resort Reservation System accomodation.php sql injection

A vulnerability has been found in SourceCodester/janobe Resort Reservation System 1.0. This vulnerability affects unknown code of the file /accomodation.php. Such manipulation of the argument q leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to the...

6.5CVSS0.00491EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2026/03/08 12:00 a.m.•27 views

PT-2026-23984

Name of the Vulnerable Software and Affected Versions SourceCodester/janobe Resort Reservation System version 1.0 Description A SQL injection issue exists in SourceCodester/janobe Resort Reservation System version 1.0. The issue is located in the /accomodation.php file. Manipulation of the q...

8.8CVSS6.4AI score0.00491EPSS
SaveExploits1References7
CNNVD
CNNVD
•added 2026/03/08 12:00 a.m.•24 views

SourceCodester Resort Reservation System SQL Injection Vulnerability

The SourceCodester Resort Reservation System is an open-source resort reservation system developed by SourceCodester. Version 1.0 of the SourceCodester Resort Reservation System has a SQL injection vulnerability. This vulnerability arises from incorrect handling of the parameter “q” in the file...

8.8CVSS6.5AI score0.00491EPSS
SaveExploits1References5
NVD
NVD
•added 2024/08/06 11:16 a.m.•32 views

CVE-2024-33979

Cross-Site Scripting XSS vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain details of their session cookie via the 'q', 'arrival', 'departure' and 'accomodation' parameters in...

7.1CVSS0.00283EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/08/06 11:04 a.m.•19 views

CVE-2024-33979 Cross-site Scripting in Janobe products

Cross-Site Scripting XSS vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain details of their session cookie via the 'q', 'arrival', 'departure' and 'accomodation' parameters in...

7.1CVSS5.7AI score0.00283EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/08/06 12:00 a.m.•19 views

PT-2024-25597 · Paypal · Paypal

Name of the Vulnerable Software and Affected Versions: Payment system versions 1.0 Description: A SQL injection issue affects the PayPal, Credit Card, and Debit Card Payment system. An attacker could exploit this by sending a specially crafted query to the server, allowing them to retrieve all...

9.8CVSS7.3AI score0.0041EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2024/08/06 12:00 a.m.•10 views

PT-2024-25611

Name of the Vulnerable Software and Affected Versions PayPal, Credit Card and Debit Card Payment version 1.0 Description A Cross-Site Scripting XSS issue affects the payment system, allowing an attacker to create a specially crafted URL and send it to a victim. The goal is to obtain details of th...

7.1CVSS0.00283EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/06 12:00 a.m.•8 views

CVE-2024-33979: Improper Neutralization of Input During Web Page Generation

Cross-Site Scripting XSS vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain details of their session cookie via the 'q', 'arrival', 'departure' and 'accomodation' parameters in...

7.1CVSS5.8AI score0.00283EPSS
SaveExploits0References1
Openbugbounty
Openbugbounty
•added 2020/04/18 4:25 a.m.•12 views

centralcoastaccomodation.com.au Open Redirect vulnerability

Open Bug Bounty ID: OBB-1145554 Security Researcher myNickName Helped patch 200 vulnerabilities Received 2 Coordinated Disclosure badges , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting centralcoastaccomodation.com.au website and its user...

0.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2019/05/14 12:00 a.m.•5 views

PT-2019-9632

Name of the Vulnerable Software and Affected Versions Tubigan "Welcome to our Resort" version 1.0 Description The issue allows SQL Injection, which can be exploited through specific API endpoints, such as "index.php?p=accomodation&q=SQL", "index.php?p=rooms&q=SQL", or "admin/login.php"...

9.8CVSS0.03213EPSS
SaveExploits5References4
Rows per page
Query Builder