CVE-2023-49988

CVE-2023-49988 Hotel Booking Management v1.0 - rooms.php의 "npss" 매개변수에서 SQL 인젝션 취약점 설명 : Hotel Booking Management 버전 1에 SQL 인젝션 취약점이 존재합니다. 악의적인 공격자는 취약한 매개변수 npss, dpss, npsd, dpsd, npds, dpds, npdd, dpdd, npdst 또는 dpdst를 통해 숙박 옵션의 가격 및 할인을 수정할 때 MySQL 데이터베이스에 SQL 명령을 실행할 수 있습니다. 취약한 제품 버전 : Hot...

Park Ticketing Management System /add-normal-ticket.php File SQL Injection Vulnerability

Park Ticketing Management System is a park ticketing management system. Park Ticketing Management System suffers from a SQL injection vulnerability, which originates from the lack of validation of externally-entered SQL statements in the parameter noadult/nochildren/aprice/cprice in the file...

CVE-2023-45341

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'price' parameter of the routers/menu-router.php resource does not validate the characters received and they are sent unfiltered to the database...

Logic flaw vulnerability in yunyecms

yunyecms is an enterprise website building system that focuses on enterprise website construction. A logic flaw vulnerability exists in yunyecms, which can be exploited by attackers to modify price parameters...