CVE-2024-42555

A Cross-Site Request Forgery CSRF in the component adminroomremoved.php of Hotel Management System commit 91caab8 allows attackers to escalate privileges...

CVE-2024-42556

Hotel Management System commit 91caab8 was discovered to contain a SQL injection vulnerability via the roomtype parameter at adminroomremoved.php...

PT-2024-30014 · Unknown · Hotel Management System

Name of the Vulnerable Software and Affected Versions: Hotel Management System affected versions not specified Description: A Cross-Site Request Forgery CSRF issue in the admin room removed.php component of the Hotel Management System allows attackers to escalate privileges. No information is...

Hotel-Management-System 安全漏洞

Hotel-Management-System is a hotel management system by the individual developer Vaibhav Verma. Hotel-Management-System has a security vulnerability that stems from an SQL injection vulnerability in the roomtype parameter of adminroomremoved.php...

PT-2024-30015 · Unknown · Hotel Management System

Name of the Vulnerable Software and Affected Versions: Hotel Management System version commit 91caab8 Description: The issue is a SQL injection vulnerability via the room type parameter at the "admin room removed.php" endpoint. This vulnerability allows for potential exploitation. Recommendations...

Hotel-Management-System 安全漏洞

Hotel-Management-System is a hotel management system by the individual developer Vaibhav Verma. Hotel-Management-System has a security vulnerability that stems from the adminroomremoved.php component containing a cross-site scripting vulnerability...

CVE-2024-42556

The Hotel Management System (version commit 91caab8 ) is vulnerable to a SQL injection vulnerability within the admin_room_removed.php endpoint. The flaw exists specifically due to improper neutralization of special elements in the room_type parameter, which could allow for potential exploitation...