7 matches found
CVE-2024-42555
A Cross-Site Request Forgery CSRF in the component adminroomremoved.php of Hotel Management System commit 91caab8 allows attackers to escalate privileges...
CVE-2024-42556
Hotel Management System commit 91caab8 was discovered to contain a SQL injection vulnerability via the roomtype parameter at adminroomremoved.php...
CVE-2024-42556: Improper Neutralization of Special Elements used in an SQL Command
Hotel Management System commit 91caab8 was discovered to contain a SQL injection vulnerability via the roomtype parameter at adminroomremoved.php...
CVE-2024-42555: Cross-Site Request Forgery (CSRF)
A Cross-Site Request Forgery CSRF in the component adminroomremoved.php of Hotel Management System commit 91caab8 allows attackers to escalate privileges...
CVE-2024-42556
Hotel Management System commit 91caab8 was discovered to contain a SQL injection vulnerability via the roomtype parameter at adminroomremoved.php...
CVE-2024-42555
The Hotel Management System (commit 91caab8) contains a Cross-Site Request Forgery (CSRF) vulnerability in the admin_room_removed.php component. This flaw allows an attacker to escalate privileges . While the specific mechanism of the attack is not detailed, the CNNVD documentation also notes a p...