28 matches found
PT-2024-20845
Name of the Vulnerable Software and Affected Versions MAGESH-K21 Online-College-Event-Hall-Reservation-System version 1.0 Description A problematic issue was found in the system, affecting an unknown function of the file /admin/receipt.php. The manipulation of the id argument leads to cross-site...
CVE-2024-2525: Improper Neutralization of Input During Web Page Generation
A vulnerability, which was classified as problematic, was found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. Affected is an unknown function of the file /admin/receipt.php. The manipulation of the argument id leads to cross site scripting. It is possible to launch the attack...
CVE-2024-2524: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. This issue affects some unknown processing of the file /admin/receipt.php. The manipulation of the argument roomid leads to sql injection. The attack may be initiated...
PT-2023-21001
Name of the Vulnerable Software and Affected Versions Best POS Management System version 1.0 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/kruxton/receipt.php" API endpoint. Recommendations For Best POS...
CVE-2023-27202: Improper Neutralization of Special Elements used in an SQL Command
Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /kruxton/receipt.php...
CVE-2022-32333
Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/admin/sales/receipt.php?id=...
PT-2022-21236
Name of the Vulnerable Software and Affected Versions Fast Food Ordering System version 1.0 Description The issue concerns SQL Injection, which can be exploited via the "/ffos/admin/sales/receipt.php?id=" API endpoint. This allows for potential manipulation of database queries by injecting...
CVE-2022-32333: Improper Neutralization of Special Elements used in an SQL Command
Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/admin/sales/receipt.php?id=...