Online Event Booking and Reservation System 2.3.0 - SQL Injection

Online Event Booking and Reservation System 2.3.0 contains a SQL injection vulnerability in event-management/views. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site. id:...

Sourcecodester Online Event Booking and Reservation System 2.3.0 - Cross-Site Scripting

Sourcecodester Online Event Booking and Reservation System 2.3.0 contains a cross-site scripting vulnerability in PHP/MySQL via the msg parameter to /event-management/index.php. An attacker can leverage this vulnerability in order to change the visibility of the website. Once the target user clic...

PHPJabbers Bus Reservation System 1.1 - Cross-Site Scripting

A vulnerability was found in PHP Jabbers Bus Reservation System 1.1 and classified as problematic. Affected by this issue is some unknown functionality of the file /index.php. The manipulation of the argument index/pickupid leads to cross site scripting. The attack may be launched remotely. id:...

EUVD-2026-90435

QloApps through 1.7.0 contains a reflected cross-site scripting vulnerability in the back-office Hotel Reservation System Book Now search, where dateto and idroomtype parameters are copied into template variables without validation. Attackers can craft a malicious link containing JavaScript paylo...

CVE-2026-103587

QloApps through 1.7.0 contains a reflected cross-site scripting vulnerability in the back-office Hotel Reservation System Book Now search, where dateto and idroomtype parameters are copied into template variables without validation. Attackers can craft a malicious link containing JavaScript paylo...

CVE-2026-103587 QloApps through 1.7.0 Reflected XSS via Book Now Search Parameters

QloApps through 1.7.0 contains a reflected cross-site scripting vulnerability in the back-office Hotel Reservation System Book Now search, where dateto and idroomtype parameters are copied into template variables without validation. Attackers can craft a malicious link containing JavaScript paylo...

CVE-2026-103587 QloApps through 1.7.0 Reflected XSS via Book Now Search Parameters

QloApps through 1.7.0 contains a reflected cross-site scripting vulnerability in the back-office Hotel Reservation System Book Now search, where dateto and idroomtype parameters are copied into template variables without validation. Attackers can craft a malicious link containing JavaScript paylo...

CVE-2026-103587

QloApps versions through 1.7.0 are vulnerable to a reflected cross-site scripting (XSS) flaw within the back-office Hotel Reservation System Book Now search functionality. The vulnerability occurs because the date_to and id_room_type parameters are copied into template variables without sufficien...

CVE-2026-103587 QloApps through 1.7.0 Reflected XSS via Book Now Search Parameters

QloApps through 1.7.0 contains a reflected cross-site scripting vulnerability in the back-office Hotel Reservation System Book Now search, where dateto and idroomtype parameters are copied into template variables without validation. Attackers can craft a malicious link containing JavaScript paylo...

CVE-2026-10288-AUTH-BYPASS

Hotel and Tourism Reservation System - 認証バイパス 脆弱性の詳細 フィールド| 詳細 ---|--- タイトル| Hotel and Tourism Reservation System - 認証バイパス ベンダー| code-projects.org 製品| Hotel and Tourism Reservation System バージョン| 1.0 脆弱性タイプ| 不適切な認証 CWE| CWE-287 CVSSスコア| 9.0 緊急 CVSSベクター| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H...

CVE-2024-10410

소스 코드 온라인 호텔 예약 시스템 PHP/MySQLi 소스 코드 포함 | SourceCodester 설명 Online Hotel Reservation System에서 고위험 취약점이 발견되었습니다. 이 취약점은 /marimar/admin/modroom/controller.php 파일의 업로드 기능에 영향을 미칩니다. 이미지 매개변수의 탐지 우회 작업으로 인해 무제한 파일 업로드가 가능합니다. 원격으로 공격을 실행할 수 있습니다. 취약점 분석 marimar\admin\modroom\controller.php 파일이 업로드된 후...

CVE-2026-10290-SQLI

호텔 및 관광 예약 시스템 - tour.php의 인증되지 않은 SQL 인젝션 취약점 세부 정보 필드| 세부 정보 ---|--- 제목| 호텔 및 관광 예약 시스템 - tour GET 매개변수를 통한 SQL 인젝션 공급업체| code-projects.org 공급업체 URL| https://code-projects.org/hotel-and-tourism-reservation-in-php-with-source-code/ 제품| 호텔 및 관광 예약 시스템 버전| 1.0 취약점 유형| SQL 인젝션 CWE| CWE-89 CVSS 점수|...

CVE-2026-92234

QloApps through 1.7.0 reflects unescaped child feature names into back-office validation error messages in the Hotel Reservation System feature management page. Authenticated back-office users who follow a crafted link can execute injected JavaScript in their administrative session via the...

EUVD-2026-80002

QloApps through 1.7.0 reflects unescaped child feature names into back-office validation error messages in the Hotel Reservation System feature management page. Authenticated back-office users who follow a crafted link can execute injected JavaScript in their administrative session via the...

CVE-2026-92234: Improper Neutralization of Input During Web Page Generation

QloApps through 1.7.0 reflects unescaped child feature names into back-office validation error messages in the Hotel Reservation System feature management page. Authenticated back-office users who follow a crafted link can execute injected JavaScript in their administrative session via the...

CVE-2026-11838

Missing authentication for critical function vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. Library Reservation System allows Input Data Manipulation. This issue affects Library Reservation System: before v22.2...

CVE-2026-11838 Improper Authorization in Yordam Informatics' Library Reservation System

Missing authentication for critical function vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. Library Reservation System allows Input Data Manipulation. This issue affects Library Reservation System: before v22.2...

EUVD-2026-74781

Missing authentication for critical function vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. Library Reservation System allows Input Data Manipulation. This issue affects Library Reservation System: before v22.2...

CVE-2026-11838

CVE-2026-11838 is a missing authentication vulnerability in the Library Reservation System developed by Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. The flaw allows input data manipulation in a critical function that lacks proper access contro...

PT-2026-88910

Missing authentication for critical function vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. Library Reservation System allows Input Data Manipulation. This issue affects Library Reservation System: before v22.2...