CVE-2025-13170

CVE-2025-13170 concerns the Simple Online Hotel Reservation System 1.0. The vulnerability is an SQL injection in the admin/account editing flow, triggered by manipulating the parameter admin_id in /admin/edit_account.php. Multiple connected sources confirm remote exploitation possibilities and th...

Simple Online Hotel Reservation System delete_account.php File SQL Injection Vulnerability

Simple Online Hotel Reservation System is a simple online hotel reservation system. Simple Online Hotel Reservation System suffers from a SQL injection vulnerability that stems from a lack of validation of an externally entered SQL statement in the parameter adminid of the deleteaccount.php file...

CVE-2025-6578

A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/deleteaccount.php. The manipulation of the argument adminid leads to sql injection. The attack can be initiated...

PT-2025-26788 · Unknown · Simple Online Hotel Reservation System

Name of the Vulnerable Software and Affected Versions: Simple Online Hotel Reservation System version 1.0 Description: A critical issue was found in the Simple Online Hotel Reservation System. The problem affects the file /admin/delete account.php, where the manipulation of the admin id argument...

Code-Projects Simple Online Hotel Reservation System 安全漏洞

Simple Online Hotel Reservation System is a simple online hotel reservation system. Simple Online Hotel Reservation System suffers from a SQL injection vulnerability that stems from a lack of validation of an externally entered SQL statement in the parameter adminid of the deleteaccount.php file...

Code-Projects Simple Online Hotel Reservation System 注入漏洞

Simple Online Hotel Reservation System is a simple online hotel reservation system. Simple Online Hotel Reservation System suffers from a SQL injection vulnerability that originates from the lack of validation of externally-entered SQL statements in the parameter name/adminid in the file...

Malicious code in admin-id (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c5cfce31b518acf3e531f6865cbc2434b5eacf844f1a47c768fa6d30bb15fc4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4297 Malicious code in admin-id (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c5cfce31b518acf3e531f6865cbc2434b5eacf844f1a47c768fa6d30bb15fc4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2011-1312

The Administrative Console component in IBM WebSphere Application Server WAS 6.1.0.x before 6.1.0.31 and 7.x before 7.0.0.15 does not prevent modifications of the primary admin id, which allows remote authenticated administrators to bypass intended access restrictions by mapping a 1 user or 2 gro...

PT-2024-33237 · Taskmatic · Taskmatic

Name of the Vulnerable Software and Affected Versions: taskmatic version 1.0 Description: The issue allows a remote attacker to execute arbitrary code via the admin id parameter of the "/update-employee.php" API endpoint. Recommendations: For taskmatic version 1.0, consider disabling the...

CVE-2024-8709

A vulnerability classified as critical has been found in SourceCodester Best House Rental Management System 1.0. Affected is the function deleteuser/saveuser of the file /adminclass.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The...

CVE-2024-3254

A vulnerability, which was classified as critical, has been found in SourceCodester Internship Portal Management System 1.0. This issue affects some unknown processing of the file admin/editadmin.php. The manipulation of the argument adminid leads to sql injection. The attack may be initiated...

Internship Portal Management System SQL注入漏洞

Internship Portal Management System is an internship portal management system by the individual developer ChatikoboL. A SQL injection vulnerability exists in Internship Portal Management System version 1.0, which originates from a SQL injection vulnerability in the username/password/name/adminid...

Internship Portal Management System 安全漏洞

Internship Portal Management System is an internship portal management system by ChatikoboL individual developer. A security vulnerability exists in version 1.0 of the Internship Portal Management System due to an SQL injection vulnerability in the adminid parameter of the admin/editadmin.php fil...

SourceCodester Task Management System SQL注入漏洞

SourceCodester Task Management System is a task management system. A SQL injection vulnerability exists in SourceCodester Task Management System version 1.0, which originates from a SQL injection vulnerability in the parameter adminid in the admin-manage-user.php file...

PT-2024-22852 · Sourcecodester · Sourcecodester Php Task Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester PHP Task Management System version 1.0 Description: The issue is related to SQL Injection via the update-admin.php endpoint, specifically through the admin id parameter. This allows for potential exploitation. No information is...

PHP Task Management System 安全漏洞

SourceCodester Task Management System is a task management system. A security vulnerability exists in PHP Task Management System version 1.0, which is vulnerable to an SQL injection attack via update-admin.php?adminid=...

CVE-2024-28595

SQL Injection vulnerability in Employee Management System v1.0 allows attackers to run arbitrary SQL commands via the adminid parameter in update-admin.php...

Employee Management System SQL Injection Vulnerability

Employee Management System is an employee management system. A SQL injection vulnerability exists in Employee Management System v1.0 that could allow an attacker to run arbitrary SQL commands via the adminid parameter in update-admin.php...

PT-2024-22491 · Unknown · Employee Management System

Name of the Vulnerable Software and Affected Versions: Employee Management System version 1.0 Description: The issue allows attackers to run arbitrary SQL commands via the admin id parameter in "update-admin.php". This can potentially lead to unauthorized access and manipulation of database...