CVE-2022-31343

Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/?page=bookings/viewdetails&id=...

CVE-2022-31343

CVE-2022-31343 affects Online Car Wash Booking System v1.0. The vulnerability is a SQL Injection in the admin view: /ocwbs/admin/?page=bookings/view_details&id=, caused by lack of input validation for the id parameter. CVSS indicators in the entry show high/critical impact (C/I/A: Partial/Partial...

CVE-2022-31344

Online Car Wash Booking System v1.0 is vulnerable to SQL Injection at /ocwbs/classes/Master.php?f=delete_booking. The Red Hat, CNVD, CNNVD, and NVD records corroborate a persistent SQLi flaw originating from lacking input validation in that endpoint, enabling potential unauthorized data access or...

CVE-2022-31344

Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/classes/Master.php?f=deletebooking...

CVE-2022-31345

CVE-2022-31345 affects Online Car Wash Booking System v1.0. Vulnerability: SQL Injection via /ocwbs/admin/?page=user/manage_user&id=. Root cause: input is not validated in the manage_user endpoint, enabling arbitrary SQL execution. Impact: potential exposure/alteration of database data as describ...

CVE-2022-31346

CVE-2022-31346 affects Online Car Wash Booking System v1.0. The vulnerability is a SQL Injection in the delete_service path handled by /ocwbs/classes/Master.php?f=delete_service, caused by lack of validation of external input. Impact per sources includes potential exposure of sensitive data and f...

CVE-2022-31347

CVE-2022-31347 affects Online Car Wash Booking System v1.0. The vulnerability is a SQL Injection via /ocwbs/classes/Master.php?f=delete_vehicle. The issue arises from improper validation/sanitization of external input in that endpoint, enabling attackers to craft input that manipulates SQL statem...

CVE-2022-31348

CVE-2022-31348 affects Online Car Wash Booking System v1.0. The vulnerability is a SQL Injection in /ocwbs/admin/bookings/update_status.php?id=, caused by lack of input validation for external SQL statements. Impact described as potential data exposure/illicit database access; exploitation detail...

CVE-2022-31348

Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/bookings/updatestatus.php?id=...

CVE-2022-31350

Online Car Wash Booking System v1.0 is vulnerable to SQL Injection through /ocwbs/admin/vehicles/manage_vehicle.php?id=. The vulnerability is corroborated by multiple connected reports (e.g., Red Hat CVE RH:CVE-2022-31350, CNVD-2022-53349) and is attributed to lack of input validation that allows...

CVE-2022-31351

CVE-2022-31351 affects Online Car Wash Booking System v1.0 by oretnom23. The flaw is a SQL injection in /ocwbs/admin/services/manage_price.php?id=, caused by unsanitized external input. This vulnerability is repeatedly reported across multiple feeds (NVD, Red Hat, CNVD/CNNVD, etc.) with high seve...

CVE-2022-31352

Online Car Wash Booking System v1.0 by oretnom23 has SQL injection in /ocwbs/admin/services/manageservice.php?id=...

CVE-2022-31352

The CVE-2022-31352 entry affects Online Car Wash Booking System v1.0 (oreo tn om23) and is caused by an SQL injection in /ocwbs/admin/services/manage_service.php?id=. The connected documents confirm the vulnerability as a SQL injection due to input validation gaps, enabling potentially unauthoriz...

CVE-2022-31353

CVE-2022-31353 affects Online Car Wash Booking System v1.0. The issue is a SQL injection in /ocwbs/admin/services/view_service.php?id=, allowing attacker-controlled input to influence SQL queries. The CVE is tracked in multiple feeds (NVD entry and Red Hat/CNVD/CVE lists) with a high to critical ...

CVE-2022-31353

Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/services/viewservice.php?id=...

CVE-2022-31354

Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/classes/Master.php?f=getvehicleservice...

CVE-2022-31354

CVE-2022-31354 affects Online Car Wash Booking System v1.0, where a SQL injection vulnerability exists in /ocwbs/classes/Master.php?f=get_vehicle_service. The root cause is unsanitized external input used in SQL statements, enabling an attacker to manipulate queries and potentially access or modi...

CVE-2022-30817

CVE-2022-30817 concerns the Simple Bus Ticket Booking System 1.0, with a vulnerability described as a SQL injection in the request path /SimpleBusTicket/index.php. Connected sources confirm this vulnerability across multiple feeds (NVD/Red Hat/CNVD/CNNVD, etc.), indicating the flaw affects the ap...

Online Sports Complex Booking System授权问题漏洞

Online Sports Complex Booking System is an online stadium booking system. version 1.0 of the Online Sports Complex Booking System is vulnerable to an authorization issue that could be exploited by attackers to take over a user's account via a specially crafted POST request...

Online Sports Complex Booking System SQL注入漏洞

Online Sports Complex Booking System is an online stadium booking system. Online Sports Complex Booking System version 1.0 is vulnerable to SQL injection and no details of the vulnerability are available...