Online Flight Booking Management System SQL注入漏洞

Online Flight Booking Management System is an online booking management system by Carlo Montero, an individual developer. SourceCodester Online Flight Booking Management System suffers from an SQL injection vulnerability that arises from some unknown functionality in its judgepanel.php file that...

Online Flight Booking Management System SQL注入漏洞

Online Flight Booking Management System is an online booking management system from the individual developer Carlo Montero. SourceCodester Online Flight Booking Management System suffers from a SQL injection vulnerability that originates in the unknown section of the reviewsearch.php file of its...

PT-2023-9439 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.1.0-rc5-00088-gf3600ff8e322 1930 Description: The vulnerability is related to the iommu/arm-smmu component in the Linux kernel. It occurs when the system is shut down with the "reboot -f" command while a packe...

PT-2023-16139 · Sourcecodester · Sourcecodester Online Flight Booking Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Flight Booking Management System affected versions not specified Description: A critical issue affects some unknown functionality of the file judge panel.php, where the manipulation of the subevent id argument leads to s...

PT-2023-16141 · Sourcecodester · Online Flight Booking Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Flight Booking Management System affected versions not specified Description: A critical issue has been discovered, affecting the file review search.php, specifically the POST Parameter Handler component. The manipulatio...

CVE-2023-0245

A vulnerability, which was classified as critical, has been found in SourceCodester Online Flight Booking Management System. This issue affects some unknown processing of the file addcontestant.php. The manipulation of the argument addcontestant leads to sql injection. The attack may be initiated...

Sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Online Flight Booking Management System. This issue affects some unknown processing of the file addcontestant.php. The manipulation of the argument addcontestant leads to sql injection. The attack may be initiated...

CVE-2023-0245

CVE-2023-0245 pertains to the SourceCodester Online Flight Booking Management System. The vulnerability affects the file handling for add_contestant.php, where manipulation of the add_contestant parameter enables a SQL injection. Descriptions consistently indicate remote initiation and public dis...

CVE-2023-0245 SourceCodester Online Flight Booking Management System add_contestant.php sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Online Flight Booking Management System. This issue affects some unknown processing of the file addcontestant.php. The manipulation of the argument addcontestant leads to sql injection. The attack may be initiated...

PT-2023-16108 · Sourcecodester · Sourcecodester Online Flight Booking Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Flight Booking Management System affected versions not specified Description: A critical issue has been found in the SourceCodester Online Flight Booking Management System, affecting the file add contestant.php. The...

Online Flight Booking Management System SQL注入漏洞

Online Flight Booking Management System is an online booking management system by Carlo Montero, an individual developer. Online Flight Booking Management System suffers from a SQL injection vulnerability that stems from some unknown handling of the file addcontestant.php, where the parameter...

Elon Musk and the Dangers of Censoring Real-Time Flight Trackers

Elon Musk claims plane-tracking data is a risky privacy violation. But the world loses a lot if this information disappears—and that's already happening...

Cross-Site Request Forgery (CSRF)

fastify is vulnerable to Cross-Site Request Forgery CSRF. The vulnerability exists due to the incorrect Content-Type used in the ContentTypeParser function of contentTypeParser.js, allowing an attacker to bypass the Pre-Flight checking of fetch.fetch requests with Content-Type’s as...

Cross site request forgery (csrf)

Fastify is a web framework with minimal overhead and plugin architecture. The attacker can use the incorrect Content-Type to bypass the Pre-Flight checking of fetch. fetch requests with Content-Type’s essence as "application/x-www-form-urlencoded", "multipart/form-data", or "text/plain", could...

CVE-2022-41919 Fastify vulnerable to Cross-Site Request Forgery (CSRF) attack via incorrect content type

Fastify is a web framework with minimal overhead and plugin architecture. The attacker can use the incorrect Content-Type to bypass the Pre-Flight checking of fetch. fetch requests with Content-Type’s essence as "application/x-www-form-urlencoded", "multipart/form-data", or "text/plain", could...

GHSA-3FJJ-P79J-C9HH Fastify: Incorrect Content-Type parsing can lead to CSRF attack

Impact The attacker can use the incorrect Content-Type to bypass the Pre-Flight checking of fetch. fetch requests with Content-Type’s essence as "application/x-www-form-urlencoded", "multipart/form-data", or "text/plain", could potentially be used to invoke routes that only accepts application/js...

Malicious Package

Overview flight-todomvc is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package wa...

Malicious Package

Overview flight-example-app is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this packag...

Airbus AoA – Angle of Attack sensor issue

I read a lot of air incident investigation reports. The aviation industry is a shining example of sharing and learning, resulting in increased safety. I wish that the cyber industry on the ground could find a way to effectively share similar experiences and learnings. Anyway, one report caught my...

DEF CON 30. Hacking EFBs. Engine Performance

At DEF CON 30 this year we demonstrated some vulnerabilities in electronic flight bags and the potential impact on flight safety. There’s plenty more detail of EFB security issues here. As part of the Aerospace Village at DEF CON 30, we invited people to fly our flight sim under instruction from...