CVE-2022-31354

Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/classes/Master.php?f=getvehicleservice...

CVE-2022-31354

CVE-2022-31354 affects Online Car Wash Booking System v1.0, where a SQL injection vulnerability exists in /ocwbs/classes/Master.php?f=get_vehicle_service. The root cause is unsanitized external input used in SQL statements, enabling an attacker to manipulate queries and potentially access or modi...

CVE-2022-30817

CVE-2022-30817 concerns the Simple Bus Ticket Booking System 1.0, with a vulnerability described as a SQL injection in the request path /SimpleBusTicket/index.php. Connected sources confirm this vulnerability across multiple feeds (NVD/Red Hat/CNVD/CNNVD, etc.), indicating the flaw affects the ap...

Online Sports Complex Booking System授权问题漏洞

Online Sports Complex Booking System is an online stadium booking system. version 1.0 of the Online Sports Complex Booking System is vulnerable to an authorization issue that could be exploited by attackers to take over a user's account via a specially crafted POST request...

Online Sports Complex Booking System SQL注入漏洞

Online Sports Complex Booking System is an online stadium booking system. Online Sports Complex Booking System version 1.0 is vulnerable to SQL injection and no details of the vulnerability are available...

Online Sports Complex Booking System SQL注入漏洞（CNVD-2022-58666）

Online Sports Complex Booking System is an online stadium booking system from Carlo Montero's personal developer. Online Sports Complex Booking System v1.0 is vulnerable to SQL injection, which can be exploited by attackers to execute illegal SQL commands to steal sensitive database data...

Online Sports Complex Booking System跨站脚本漏洞

Online Sports Complex Booking System is an online stadium booking system from Carlo Montero's personal developer. Online Sports Complex Booking System is vulnerable to a cross-site scripting vulnerability that originates in /scbs/classes/Users. php?f=saveclient lacks a validation filter for...

CVE-2022-28992

A Cross-Site Request Forgery CSRF in Online Banquet Booking System v1.0 allows attackers to change admin credentials via a crafted POST request...

CVE-2022-28105

Online Sports Complex Booking System v1.0 was discovered to contain a blind SQL injection vulnerability via the id parameter in /scbs/viewfacility.php...

CVE-2022-28992

A Cross-Site Request Forgery CSRF in Online Banquet Booking System v1.0 allows attackers to change admin credentials via a crafted POST request...

Cross site request forgery (csrf)

A Cross-Site Request Forgery CSRF in Online Banquet Booking System v1.0 allows attackers to change admin credentials via a crafted POST request...

CVE-2022-28992

CVE-2022-28992 affects Online Banquet Booking System v1.0 and is a CSRF vulnerability that enables an attacker to change administrator credentials via a crafted POST request. Multiple sources confirm the impact and symmetry across advisories (e.g., Red Hat, CNVD, CNNVD, CVE listings). The core is...

CVE-2022-28992

A Cross-Site Request Forgery CSRF in Online Banquet Booking System v1.0 allows attackers to change admin credentials via a crafted POST request...

CVE-2022-28106

CVE-2022-28106 affects the Online Sports Complex Booking System v1.0. Public sources consistently describe an authorization flaw that lets an attacker take over a user account through a crafted POST request. The available documents do not provide explicit technical details on the affected compone...

CVE-2022-28105

Online Sports Complex Booking System v1.0 is affected by a blind SQL injection vulnerability in the id parameter of /scbs/view_facility.php. This flaw, identified in CVE-2022-28105, arises from unsanitized input used in SQL queries, enabling potential disclosure or manipulation of database data. ...

Online Banquet Booking System 跨站请求伪造漏洞

Online Banquet Booking System is an online banquet booking system. version 1.0 of Online Banquet Booking System is vulnerable to cross-site request forgery. An attacker could use this vulnerability to change the administrator credentials via a specially crafted POST request...

CVE-2022-29304

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /classes/master.php?f=delete Facility...

CVE-2022-28962

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/classes/Users.php?f=deleteclient...

CVE-2022-29304

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /classes/master.php?f=delete Facility...

CVE-2022-28962

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/classes/Users.php?f=deleteclient...