CVE-2021-42667

CVE-2021-42667 CVE-2021-42667 - SQLインジェクションの脆弱性。Online event booking and reservation systemバージョン2.3.0。 技術的説明: Event management softwareバージョン2.3.0にSQLインジェクションの脆弱性が存在します。攻撃者は「USER」ウェブページの脆弱性のある「id」パラメータを悪用して、実行されるSQLクエリを操作できます。その結果、攻撃者はウェブサーバーから機密データを抽出できます。 脆弱なページ - USER 脆弱なパラメータ - "id" 悪用手順: 1...

CVE-2021-42662

CVE-2021-42662 CVE-2021-42662 - 온라인 이벤트 예약 및 예약 시스템 버전 2.3.0의 저장형 크로스 사이트 스크립팅Stored XSS 취약점 기술 설명: 이벤트 관리 소프트웨어 버전 2.3.0에는 저장형 XSS 취약점이 존재합니다. 공격자는 이 취약점을 악용하여 웹 서버 사용자를 대신해 자바스크립트를 실행할 수 있으며, 이는 쿠키 탈취, 디페이스 등으로 이어질 수 있습니다. 영향받는 구성 요소 - 취약한 페이지 - HOLY 취약한 매개변수 - "reason" 익스플로잇 단계: 1...

PT-2025-37117

Name of the Vulnerable Software and Affected Versions PuneethReddyHC Event Management System version 1.0 Description A reflected Cross-Site Scripting XSS issue exists in the register.php script. The mobile parameter is not properly validated, and its value is echoed in the HTTP response without...

Free School Management Software 1.0 - (multiple) Stored Cross-Site Scripting Vulnerability

Exploit Title: Free School Management Software 1.0 - 'multiple' Stored Cross-Site Scripting XSS Exploit Author: fuzzyap1 Category: Web application Vendor Homepage: https://www.sourcecodester.com/php/15073/free-school-management-software.html Software Link:...

Free School Management Software 1.0 Cross Site Scripting

Exploit Title: Free School Management Software 1.0 - 'multiple' Stored Cross-Site Scripting XSS Exploit Author: fuzzyap1 Date: 7-12-2021 Category: Web application Vendor Homepage: https://www.sourcecodester.com/php/15073/free-school-management-software.html Software Link:...

Exploit for SQL Injection in Online_Event_Booking_And_Reservation_System_Project Online_Event_Booking_And_Reservation_System

CVE-2021-42667 CVE-2021-42667 - SQL Injection vulnerability in...

Exploit for SQL Injection in Online_Event_Booking_And_Reservation_System_Project Online_Event_Booking_And_Reservation_System

CVE-2021-42667 CVE-2021-42667 - SQL Injection vulnerability in...

Exploit for Cross-site Scripting in Online_Event_Booking_And_Reservation_System_Project Online_Event_Booking_And_Reservation_System

CVE-2021-42662 CVE-2021-42662 - Stored Cross-Site Scripting vu...

Online Event Booking and Reservation System 1.0 - (reason) Stored Cross-Site Scripting Vulnerability

Exploit Title: Online Event Booking and Reservation System 1.0 - 'reason' Stored Cross-Site Scripting XSS Exploit Author: Alon Leviev Category: Web application Vendor Homepage: https://www.sourcecodester.com/php/14241/online-event-booking-and-reservation-system-phpmysql.html Software Link:...

Online Event Booking And Reservation System 1.0 Cross Site Scripting

Exploit Title: Online Event Booking and Reservation System 1.0 - 'reason' Stored Cross-Site Scripting XSS Exploit Author: Alon Leviev Date: 22-10-2021 Category: Web application Vendor Homepage: https://www.sourcecodester.com/php/14241/online-event-booking-and-reservation-system-phpmysql.html...