CVE-2022-2689 SourceCodester Wedding Hall Booking System Contact Page cross site scripting

A vulnerability classified as problematic has been found in SourceCodester Wedding Hall Booking System. Affected is an unknown function of the file /whbs/?page=contactus of the component Contact Page. The manipulation of the argument Message leads to cross site scripting. It is possible to launch...

CVE-2022-2689

The CVE-2022-2689 entry concerns SourceCodester Wedding Hall Booking System. Affected is the Contact Page function handling the Message parameter in /whbs/?page=contact_us, where manipulation of Message enables a cross-site scripting (XSS) vulnerability. The issue can be exploited remotely, and t...

Wedding Hall Booking System 跨站脚本漏洞

Wedding Hall Booking System is a simple PHP-titled wedding hall booking system by the individual developer Carlo Montero. A cross-site scripting vulnerability exists in SourceCodester Wedding Hall Booking System, which stems from an unknown portion of the Staff User Profile code in its...

PT-2022-18127 · Sourcecodester · Sourcecodester Wedding Hall Booking System

Name of the Vulnerable Software and Affected Versions: SourceCodester Wedding Hall Booking System affected versions not specified Description: A problematic vulnerability was found in the SourceCodester Wedding Hall Booking System, affecting an unknown functionality of the file /whbs/?page=my...

PT-2022-18125

Name of the Vulnerable Software and Affected Versions SourceCodester Wedding Hall Booking System affected versions not specified Description A problematic vulnerability has been found in the SourceCodester Wedding Hall Booking System. The issue affects an unknown function of the file...

CVE-2022-2692: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in SourceCodester Wedding Hall Booking System. This affects an unknown part of the file /whbs/admin/?page=user of the component Staff User Profile. The manipulation of the argument First Name/Last Name leads to cross site scripting. ...

CVE-2022-2691: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in SourceCodester Wedding Hall Booking System. Affected by this issue is some unknown functionality of the file /whbs/?page=manageaccount of the component Profile Page. The manipulation leads to cross site scripting. The attack...

CVE-2022-2690: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in SourceCodester Wedding Hall Booking System. Affected by this vulnerability is an unknown functionality of the file /whbs/?page=mybookings of the component Booking Form. The manipulation of the argument Remarks leads to cross site scripting. T...

CVE-2022-2689: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in SourceCodester Wedding Hall Booking System. Affected is an unknown function of the file /whbs/?page=contactus of the component Contact Page. The manipulation of the argument Message leads to cross site scripting. It is possible to launch...

PT-2022-18034 · Unknown · Rigatur Online Booking/Hotel Management System

Name of the Vulnerable Software and Affected Versions: Rigatur Online Booking and Hotel Management System version aff6409 Description: A critical issue was found in the file login.php of the component POST Request Handler, where the manipulation of the email/pass argument leads to sql injection...

WordPress Plugin Online Hotel Booking System Pro SQL Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

Projectworlds Online Hotel Booking System SQL Injection Vulnerability

Projectworlds Online Hotel Booking System is a hotel online booking system from Projectworlds. A SQL injection vulnerability exists in Online Hotel Booking System version 1.0. An attacker can exploit this vulnerability to perform a sql injection attack...

Projectworlds Online Hotel Booking System SQL Injection Vulnerability (CNVD-2022-58410)

Projectworlds Online Hotel Booking System is a hotel online booking system from Projectworlds. A SQL injection vulnerability exists in Projectworlds Online Hotel Booking System version 1.0. The vulnerability stems from a lack of validation of the roomname parameter against an externally entered S...

CVE-2022-2263

A vulnerability was found in Online Hotel Booking System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file editroomcat.php of the component Room Handler. The manipulation of the argument roomname leads to sql injection. The attack may be launched...

CVE-2022-2263

A vulnerability was found in Online Hotel Booking System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file editroomcat.php of the component Room Handler. The manipulation of the argument roomname leads to sql injection. The attack may be launched...

CVE-2022-2262

A vulnerability has been found in Online Hotel Booking System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file editallroom.php of the component Room Handler. The manipulation of the argument id with the input...

Sql injection

A vulnerability was found in Online Hotel Booking System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file editroomcat.php of the component Room Handler. The manipulation of the argument roomname leads to sql injection. The attack may be launched...

CVE-2022-2263 Online Hotel Booking System Room edit_room_cat.php sql injection

A vulnerability was found in Online Hotel Booking System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file editroomcat.php of the component Room Handler. The manipulation of the argument roomname leads to sql injection. The attack may be launched...

CVE-2022-2263

CVE-2022-2263 affects Online Hotel Booking System 1.0. The vulnerability resides in the edit_room_cat.php component (Room Handler) where manipulating the roomname parameter leads to a SQL injection. Exploitation can be performed remotely and publicly disclosed, enabling an attacker to compromise ...

CVE-2022-2262 Online Hotel Booking System Room edit_all_room.php sql injection

A vulnerability has been found in Online Hotel Booking System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file editallroom.php of the component Room Handler. The manipulation of the argument id with the input...