CVE-2021-41651

CVE-2021-41651 CVE-2021-41651 SQL Injection in hotel-mgmt-system The hotel-mgmt-system is vulnerable to un-authenticated time based blind SQL Injection attack. The cid parameter on the /processupdateprofile.php page does not sanitize the user input, an attacker can extract sensisitive data from t...

CVE-2022-48090

Tramyardg hotel-mgmt-system version 2022.4 is vulnerable to SQL Injection via /app/dao/CustomerDAO.php...

CVE-2022-48091

Tramyardg hotel-mgmt-system version 2022.4 is vulnerable to Cross Site Scripting XSS via processupdateprofile.php...

Sql injection

Tramyardg hotel-mgmt-system version 2022.4 is vulnerable to SQL Injection via /app/dao/CustomerDAO.php...

Cross site scripting

Tramyardg hotel-mgmt-system version 2022.4 is vulnerable to Cross Site Scripting XSS via processupdateprofile.php...

CVE-2022-48090

Tramyardg hotel-mgmt-system version 2022.4 is vulnerable to SQL Injection via /app/dao/CustomerDAO.php...

CVE-2022-48090: Improper Neutralization of Special Elements used in an SQL Command

Tramyardg hotel-mgmt-system version 2022.4 is vulnerable to SQL Injection via /app/dao/CustomerDAO.php...

CVE-2022-48091

Tramyardg hotel-mgmt-system version 2022.4 is vulnerable to Cross Site Scripting XSS via processupdateprofile.php...

CVE-2022-48091: Improper Neutralization of Input During Web Page Generation

Tramyardg hotel-mgmt-system version 2022.4 is vulnerable to Cross Site Scripting XSS via processupdateprofile.php...

CVE-2022-27475

Cross site scripting XSS vulnerability in tramyardg hotel-mgmt-system, allows attackers to execute arbitrary code when when /admin.php is loaded...

CVE-2022-27475

Cross site scripting XSS vulnerability in tramyardg hotel-mgmt-system, allows attackers to execute arbitrary code when when /admin.php is loaded...

Cross site scripting

Cross site scripting XSS vulnerability in tramyardg hotel-mgmt-system, allows attackers to execute arbitrary code when when /admin.php is loaded...

CVE-2022-27475

CVE-2022-27475 is an XSS vulnerability in tramyardg hotel-mgmt-system (version 1.0) due to lack of proper data validation/escaping in /admin.php. Exploitation would allow execution of arbitrary JavaScript in the victim’s browser; impact details are described in the linked records as client-side s...

CVE-2022-27475

Cross site scripting XSS vulnerability in tramyardg hotel-mgmt-system, allows attackers to execute arbitrary code when when /admin.php is loaded...

CVE-2022-27475: Improper Neutralization of Input During Web Page Generation

Cross site scripting XSS vulnerability in tramyardg hotel-mgmt-system, allows attackers to execute arbitrary code when when /admin.php is loaded...

CVE-2021-41651

A blind SQL injection vulnerability exists in the Raymart DG / Ahmed Helal Hotel-mgmt-system. A malicious attacker can retrieve sensitive database information and interact with the database using the vulnerable cid parameter in processupdateprofile.php...

Sql injection

A blind SQL injection vulnerability exists in the Raymart DG / Ahmed Helal Hotel-mgmt-system. A malicious attacker can retrieve sensitive database information and interact with the database using the vulnerable cid parameter in processupdateprofile.php...

CVE-2021-41651

A blind SQL injection vulnerability exists in the Raymart DG / Ahmed Helal Hotel-mgmt-system. A malicious attacker can retrieve sensitive database information and interact with the database using the vulnerable cid parameter in processupdateprofile.php...

CVE-2021-41651

CVE-2021-41651 describes a blind SQL injection in the Raymart DG / Ahmed Helal Hotel-mgmt-system. The vulnerability resides in the vulnerable parameter cid of process_update_profile.php , allowing an attacker to retrieve sensitive database information via unauthenticated, time-based blind techniq...

CVE-2021-41651: Improper Neutralization of Special Elements used in an SQL Command

A blind SQL injection vulnerability exists in the Raymart DG / Ahmed Helal Hotel-mgmt-system. A malicious attacker can retrieve sensitive database information and interact with the database using the vulnerable cid parameter in processupdateprofile.php...