Lucene search
+L

5 matches found

RedhatCVE
RedhatCVE
•added 2025/12/08 6:11 p.m.•30 views

CVE-2025-14201

A vulnerability was found in alokjaiswal Hotel-Management-services-using-MYSQL-and-php up to 5f8b60a7aa6c06a5632de569d4e3f6a8cd82f76f. Affected by this vulnerability is an unknown functionality of the file /dishsub.php. The manipulation of the argument item.name results in cross site scripting. I...

4.8CVSS3.9AI score0.00278EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2025/12/07 6:02 p.m.•22 views

CVE-2025-14201 alokjaiswal Hotel-Management-services-using-MYSQL-and-php dishsub.php cross site scripting

A vulnerability was found in alokjaiswal Hotel-Management-services-using-MYSQL-and-php up to 5f8b60a7aa6c06a5632de569d4e3f6a8cd82f76f. Affected by this vulnerability is an unknown functionality of the file /dishsub.php. The manipulation of the argument item.name results in cross site scripting. I...

4.8CVSS4.2AI score
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2025/12/07 6:02 p.m.•7 views

CVE-2025-14201 alokjaiswal Hotel-Management-services-using-MYSQL-and-php dishsub.php cross site scripting

A vulnerability was found in alokjaiswal Hotel-Management-services-using-MYSQL-and-php up to 5f8b60a7aa6c06a5632de569d4e3f6a8cd82f76f. Affected by this vulnerability is an unknown functionality of the file /dishsub.php. The manipulation of the argument item.name results in cross site scripting. I...

4.8CVSS3.9AI score0.00278EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2025/12/07 12:00 a.m.•12 views

Hotel-Management-services-using-MYSQL-and-php 代码注入漏洞

Hotel-Management-services-using-MYSQL-and-php is a hotel management system by the individual developer Alok .S. Jaiswal. A code injection vulnerability exists in Hotel-Management-services-using-MYSQL-and-php, which stems from improper handling of the parameter item.name in the file /dishsub.php,...

4.8CVSS5.4AI score0.00278EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/07 12:00 a.m.•5 views

CVE-2025-14201: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in alokjaiswal Hotel-Management-services-using-MYSQL-and-php up to 5f8b60a7aa6c06a5632de569d4e3f6a8cd82f76f. Affected by this vulnerability is an unknown functionality of the file /dishsub.php. The manipulation of the argument item.name results in cross site scripting. I...

4.8CVSS3.9AI score0.00278EPSS
SaveExploits1References5
Rows per page
Query Builder