Online Car Wash Booking System SQL注入漏洞

Online Car Wash Booking System is an online car wash booking system from Carlo Montero's personal developer. version v1.0 of Online Car Wash Booking System is vulnerable to SQL injection, which originates from /ocwbs/classes/Master.php?f =deletebooking page lacks validation for external input SQL...

CVE-2022-31342

Online Car Wash Booking System v1.0 is vulnerable to Delete any file via /ocwbs/classes/Master.php?f=deleteimg...

CVE-2022-31342

Online Car Wash Booking System v1.0 is vulnerable to arbitrary file deletion via /ocwbs/classes/Master.php?f=delete_img, due to lack of validation for file names in Master.php. Affected component/file: Master.php (delete_img). Consequences stated: arbitrary deletion of files. Connected Red Hat/CV...

CVE-2022-31343

Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/?page=bookings/viewdetails&id=...

CVE-2022-31343

CVE-2022-31343 affects Online Car Wash Booking System v1.0. The vulnerability is a SQL Injection in the admin view: /ocwbs/admin/?page=bookings/view_details&id=, caused by lack of input validation for the id parameter. CVSS indicators in the entry show high/critical impact (C/I/A: Partial/Partial...

CVE-2022-31344

Online Car Wash Booking System v1.0 is vulnerable to SQL Injection at /ocwbs/classes/Master.php?f=delete_booking. The Red Hat, CNVD, CNNVD, and NVD records corroborate a persistent SQLi flaw originating from lacking input validation in that endpoint, enabling potential unauthorized data access or...

CVE-2022-31344

Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/classes/Master.php?f=deletebooking...

CVE-2022-31345

CVE-2022-31345 affects Online Car Wash Booking System v1.0. Vulnerability: SQL Injection via /ocwbs/admin/?page=user/manage_user&id=. Root cause: input is not validated in the manage_user endpoint, enabling arbitrary SQL execution. Impact: potential exposure/alteration of database data as describ...

CVE-2022-31345

Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/?page=user/manageuser&id=...

CVE-2022-31346

Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/classes/Master.php?f=deleteservice...

CVE-2022-31346

CVE-2022-31346 affects Online Car Wash Booking System v1.0. The vulnerability is a SQL Injection in the delete_service path handled by /ocwbs/classes/Master.php?f=delete_service, caused by lack of validation of external input. Impact per sources includes potential exposure of sensitive data and f...

CVE-2022-31347

CVE-2022-31347 affects Online Car Wash Booking System v1.0. The vulnerability is a SQL Injection via /ocwbs/classes/Master.php?f=delete_vehicle. The issue arises from improper validation/sanitization of external input in that endpoint, enabling attackers to craft input that manipulates SQL statem...

CVE-2022-31347

Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/classes/Master.php?f=deletevehicle...

CVE-2022-31348

CVE-2022-31348 affects Online Car Wash Booking System v1.0. The vulnerability is a SQL Injection in /ocwbs/admin/bookings/update_status.php?id=, caused by lack of input validation for external SQL statements. Impact described as potential data exposure/illicit database access; exploitation detail...

CVE-2022-31348

Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/bookings/updatestatus.php?id=...

CVE-2022-31350

Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/vehicles/managevehicle.php?id=...

CVE-2022-31350

Online Car Wash Booking System v1.0 is vulnerable to SQL Injection through /ocwbs/admin/vehicles/manage_vehicle.php?id=. The vulnerability is corroborated by multiple connected reports (e.g., Red Hat CVE RH:CVE-2022-31350, CNVD-2022-53349) and is attributed to lack of input validation that allows...

CVE-2022-31351

CVE-2022-31351 affects Online Car Wash Booking System v1.0 by oretnom23. The flaw is a SQL injection in /ocwbs/admin/services/manage_price.php?id=, caused by unsanitized external input. This vulnerability is repeatedly reported across multiple feeds (NVD, Red Hat, CNVD/CNNVD, etc.) with high seve...

CVE-2022-31351

Online Car Wash Booking System v1.0 by oretnom23 has SQL injection via /ocwbs/admin/services/manageprice.php?id=...

CVE-2022-31352

The CVE-2022-31352 entry affects Online Car Wash Booking System v1.0 (oreo tn om23) and is caused by an SQL injection in /ocwbs/admin/services/manage_service.php?id=. The connected documents confirm the vulnerability as a SQL injection due to input validation gaps, enabling potentially unauthoriz...