CVE-2022-43084

CVE-2022-43084 describes a cross-site scripting (XSS) vulnerability in Vehicle Booking System v1.0, specifically in the admin-add-vehicle.php page. The flaw arises from insufficient input sanitization of the v_name parameter, allowing an attacker to inject arbitrary web scripts or HTML via a craf...

CVE-2022-43083

CVE-2022-43083 affects Vehicle Booking System v1.0 via an arbitrary file upload in admin-add-vehicle.php that allows code execution through a crafted PHP file. The base vulnerability is confirmed across multiple sources (NVD/Red Hat/CNVD/CVE list). CVSS v3.1 base score 7.2 (High): network attack ...

CVE-2022-43083

An arbitrary file upload vulnerability in admin-add-vehicle.php of Vehicle Booking System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-43084

A cross-site scripting XSS vulnerability in admin-add-vehicle.php of Vehicle Booking System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the vname parameter...

CVE-2022-43083

An arbitrary file upload vulnerability in admin-add-vehicle.php of Vehicle Booking System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...

Vehicle Booking System 代码问题漏洞

Vehicle Booking System is a vehicle booking system. A file upload vulnerability exists in Vehicle Booking System v1.0, which can be exploited by an attacker to execute arbitrary code via a specially crafted php file...

CVE-2022-2689

A vulnerability classified as problematic has been found in SourceCodester Wedding Hall Booking System. Affected is an unknown function of the file /whbs/?page=contactus of the component Contact Page. The manipulation of the argument Message leads to cross site scripting. It is possible to launch...

CVE-2022-2692

A vulnerability, which was classified as problematic, was found in SourceCodester Wedding Hall Booking System. This affects an unknown part of the file /whbs/admin/?page=user of the component Staff User Profile. The manipulation of the argument First Name/Last Name leads to cross site scripting. ...

CVE-2022-2690

A vulnerability classified as problematic was found in SourceCodester Wedding Hall Booking System. Affected by this vulnerability is an unknown functionality of the file /whbs/?page=mybookings of the component Booking Form. The manipulation of the argument Remarks leads to cross site scripting. T...

CVE-2022-2691

A vulnerability, which was classified as problematic, has been found in SourceCodester Wedding Hall Booking System. Affected by this issue is some unknown functionality of the file /whbs/?page=manageaccount of the component Profile Page. The manipulation leads to cross site scripting. The attack...

Cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester Wedding Hall Booking System. This affects an unknown part of the file /whbs/admin/?page=user of the component Staff User Profile. The manipulation of the argument First Name/Last Name leads to cross site scripting. ...

Cross site scripting

A vulnerability classified as problematic has been found in SourceCodester Wedding Hall Booking System. Affected is an unknown function of the file /whbs/?page=contactus of the component Contact Page. The manipulation of the argument Message leads to cross site scripting. It is possible to launch...

Cross site scripting

A vulnerability, which was classified as problematic, has been found in SourceCodester Wedding Hall Booking System. Affected by this issue is some unknown functionality of the file /whbs/?page=manageaccount of the component Profile Page. The manipulation leads to cross site scripting. The attack...

CVE-2022-2692

CVE-2022-2692 affects SourceCodester Wedding Hall Booking System, specifically the Staff User Profile component at /whbs/admin/?page=user. The vulnerability arises from manipulation of the First Name/Last Name arguments, leading to cross-site scripting (XSS). It is possible to initiate the attack...

CVE-2022-2692 SourceCodester Wedding Hall Booking System Staff User Profile cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester Wedding Hall Booking System. This affects an unknown part of the file /whbs/admin/?page=user of the component Staff User Profile. The manipulation of the argument First Name/Last Name leads to cross site scripting. ...

CVE-2022-2692 SourceCodester Wedding Hall Booking System Staff User Profile cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester Wedding Hall Booking System. This affects an unknown part of the file /whbs/admin/?page=user of the component Staff User Profile. The manipulation of the argument First Name/Last Name leads to cross site scripting. ...

CVE-2022-2691

The vulnerability CVE-2022-2691 affects the SourceCodester Wedding Hall Booking System, specifically the Profile Page function at /whbs/?page=manage_account. The documented issue is a cross-site scripting (XSS) vulnerability caused by manipulation of unknown functionality within that page. It can...

CVE-2022-2691 SourceCodester Wedding Hall Booking System Profile Page cross site scripting

A vulnerability, which was classified as problematic, has been found in SourceCodester Wedding Hall Booking System. Affected by this issue is some unknown functionality of the file /whbs/?page=manageaccount of the component Profile Page. The manipulation leads to cross site scripting. The attack...

CVE-2022-2690

The CVE-2022-2690 issue affects SourceCodester Wedding Hall Booking System, specifically the /whbs/?page=my_bookings Booking Form. The known vulnerability is cross-site scripting triggered by manipulating the Remarks parameter in that function, with remote exploitation possible. Public disclosure...

CVE-2022-2689 SourceCodester Wedding Hall Booking System Contact Page cross site scripting

A vulnerability classified as problematic has been found in SourceCodester Wedding Hall Booking System. Affected is an unknown function of the file /whbs/?page=contactus of the component Contact Page. The manipulation of the argument Message leads to cross site scripting. It is possible to launch...