40 matches found
CVE-2024-48246
CVE-2024-48246 Vehicle Management System 1.0 - 저장형 크로스 사이트 스크립팅 XSS 설명 Vehicle Management System 1.0은 /vehicle-management/booking.php의 Name 매개변수에 저장형 크로스 사이트 스크립팅 XSS 취약점을 포함하고 있습니다. 악의적인 공격자는 Name 필드에 악성 페이로드를 주입할 수 있으며, 이는 관리자가 /vehicle-management/bookinglist.php에서 예약 목록을 볼 때 저장되고 실행됩니다. 이로 인해 ...
CVE-2026-85402
A vulnerability was detected in code-projects Doctor Appointment System 1.0. This vulnerability affects unknown code of the file /patient/booking.php. The manipulation of the argument docid results in sql injection. The attack may be launched remotely. The exploit is now public and may be used...
CVE-2026-85402 code-projects Doctor Appointment System booking.php sql injection
A vulnerability was detected in code-projects Doctor Appointment System 1.0. This vulnerability affects unknown code of the file /patient/booking.php. The manipulation of the argument docid results in sql injection. The attack may be launched remotely. The exploit is now public and may be used...
EUVD-2026-70873
A vulnerability was detected in code-projects Doctor Appointment System 1.0. This vulnerability affects unknown code of the file /patient/booking.php. The manipulation of the argument docid results in sql injection. The attack may be launched remotely. The exploit is now public and may be used...
CVE-2026-85402
A SQL injection vulnerability exists in the code-projects Doctor Appointment System 1.0 , specifically in the file /patient/booking.php . The root cause is the unsanitized manipulation of the doc_id argument, allowing a remote attacker to inject SQL commands without requiring authentication or us...
CVE-2026-7089 code-projects Home Service System Appointment Booking booking.php cross site scripting
A security vulnerability has been detected in code-projects Home Service System 1.0. The impacted element is an unknown function of the file /booking.php of the component Appointment Booking. The manipulation of the argument fname/lname leads to cross site scripting. The attack may be initiated...
PT-2026-35355
A security vulnerability has been detected in code-projects Home Service System 1.0. The impacted element is an unknown function of the file /booking.php of the component Appointment Booking. The manipulation of the argument fname/lname leads to cross site scripting. The attack may be initiated...
CVE-2025-11662
A security flaw has been discovered in SourceCodester Best Salon Management System 1.0. Impacted is an unknown function of the file /booking.php. The manipulation of the argument servid results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the...
CVE-2025-11662
A security flaw has been discovered in SourceCodester Best Salon Management System 1.0. Impacted is an unknown function of the file /booking.php. The manipulation of the argument servid results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the...
EUVD-2023-55595
Malicious code in bioql PyPI...
EUVD-2023-54705
Malicious code in bioql PyPI...
EUVD-2022-32579
Malicious code in bioql PyPI...
CVE-2025-8970 itsourcecode Online Tour and Travel Management System booking.php sql injection
A vulnerability was found in itsourcecode Online Tour and Travel Management System 1.0. This affects an unknown part of the file /admin/operations/booking.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclose...
PT-2025-33351 · Itsourcecode · Itsourcecode Online Tour/Travel Management System
Name of the Vulnerable Software and Affected Versions: itsourcecode Online Tour and Travel Management System version 1.0 Description: A SQL injection issue exists in itsourcecode Online Tour and Travel Management System version 1.0. The vulnerability is located in the /admin/operations/booking.ph...
CVE-2024-25307
Code-projects Cinema Seat Reservation System 1.0 allows SQL Injection via the 'id' parameter at "/Cinema-Reservation/booking.php?id=1."...
CVE-2024-48246
Vehicle Management System 1.0 contains a Stored Cross-Site Scripting XSS vulnerability in the "Name" parameter of /vehicle-management/booking.php...
CVE-2024-25307
Code-projects Cinema Seat Reservation System 1.0 allows SQL Injection via the 'id' parameter at "/Cinema-Reservation/booking.php?id=1."...
CVE-2024-25307
Code-projects Cinema Seat Reservation System 1.0 allows SQL Injection via the 'id' parameter at "/Cinema-Reservation/booking.php?id=1."...
