Lucene search
+L

3 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/27 12:00 a.m.•3 views

CVE-2026-4966: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in itsourcecode Free Hotel Reservation System 1.0. Impacted is an unknown function of the file /admin/modroom/index.php?view=edit. Executing a manipulation of the argument ID can lead to sql injection. The attack can be launched remotely. The exploit has been published and m...

6.5CVSS6.5AI score0.00316EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/06 12:00 a.m.•5 views

CVE-2024-33963: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'id' in '/admin/modroom/index.php'...

9.8CVSS5.8AI score0.00454EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/05 12:00 a.m.•2 views

CVE-2024-3350: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in SourceCodester Aplaya Beach Resort Online Reservation System 1.0. Affected by this issue is some unknown functionality of the file admin/modroom/index.php. The manipulation of the argument id leads to sql injection. The attack m...

9.8CVSS5.5AI score0.00897EPSS
SaveExploits1References2
Rows per page
Query Builder