Number withdrawn

Projectworlds Railway Reservation System is a railroad reservation system by Projectworlds India. This CVE number has been withdrawn...

Number withdrawn

Projectworlds Railway Reservation System is a railroad reservation system by Projectworlds India. This CVE number has been withdrawn...

Projectworlds Railway Reservation System SQL Injection Vulnerability

Projectworlds Railway Reservation System is a railroad reservation system from Projectworlds India. A SQL injection vulnerability exists in Projectworlds Railway Reservation System v1.0, which stems from the "psd" parameter of login.php that does not validate incoming characters and sends them to...

PT-2023-30896 · Unknown · Railway Reservation System

Name of the Vulnerable Software and Affected Versions: Railway Reservation System version 1.0 Description: The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. The 'from' parameter of the "reservation.php" resource does not validate the characters received, and they are sent...

PT-2023-30895 · Unknown · Railway Reservation System

Name of the Vulnerable Software and Affected Versions: Railway Reservation System version 1.0 Description: The issue concerns an Unauthenticated SQL Injection vulnerability. Specifically, the user parameter of the "login.php" resource does not validate the characters received and they are sent...

Projectworlds Railway Reservation System SQL Injection Vulnerability

Projectworlds Railway Reservation System is a railroad reservation system from Projectworlds India. A SQL injection vulnerability exists in Projectworlds Railway Reservation System v1.0, which stems from the "byname" parameter of train.php that does not validate received characters and is sent to...

Projectworlds Railway Reservation System SQL Injection Vulnerability

Projectworlds Railway Reservation System is a railroad reservation system from Projectworlds India. A SQL injection vulnerability exists in Projectworlds Railway Reservation System v1.0, which stems from the "from" parameter of reservation.php not validating received characters and sending them t...

PT-2023-30898 · Unknown · Railway Reservation System

Name of the Vulnerable Software and Affected Versions: Railway Reservation System version 1.0 Description: The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. The byname parameter of the "train.php" resource does not validate the characters received, and they are sent...

CVE-2023-43458

Cross Site Scripting XSS vulnerability in Resort Reservation System v.1.0 allows a remote attacker to execute arbitrary code and obtain sensitive information via the room, name, and description parameters in the manageroom function...

CVE-2023-43458

Cross Site Scripting XSS vulnerability in Resort Reservation System v.1.0 allows a remote attacker to execute arbitrary code and obtain sensitive information via the room, name, and description parameters in the manageroom function...

Resort Reservation System Cross-Site Scripting Vulnerability

Resort Reservation System is a Resort Reservation System by Carlo Montero Personal Developer. A security vulnerability exists in Resort Reservation System version v.1.0, which stems from a cross-site scripting XSS vulnerability. The vulnerability can be exploited by an attacker to obtain sensitiv...

CVE-2023-43458

Cross Site Scripting XSS vulnerability in Resort Reservation System v.1.0 allows a remote attacker to execute arbitrary code and obtain sensitive information via the room, name, and description parameters in the manageroom function...

PT-2023-28830 · Unknown · Resort Reservation System

Name of the Vulnerable Software and Affected Versions: Resort Reservation System version 1.0 Description: A Cross Site Scripting XSS issue allows a remote attacker to execute arbitrary code and obtain sensitive information via the room, name, and description parameters in the manage room function...

CVE-2023-43458

Cross Site Scripting XSS vulnerability in Resort Reservation System v.1.0 allows a remote attacker to execute arbitrary code and obtain sensitive information via the room, name, and description parameters in the manageroom function...

CVE-2023-43458

CVE-2023-43458 describes a cross-site scripting (XSS) vulnerability in the Resort Reservation System v1.0. The issue affects the input handling in the manage_room function, where parameters such as room, name, and description can be manipulated to execute arbitrary code in a victim’s browser. The...

Resort Reservation System manage_user.php Page SQL Injection Vulnerability

Resort Reservation System is a resort reservation system. A SQL injection vulnerability exists in version 1.0 of the Resort Reservation System due to a lack of validation of externally entered SQL statements in the id parameter of the manageuser.php page. An attacker can use this vulnerability to...

CVE-2023-4193

A vulnerability has been found in SourceCodester Resort Reservation System 1.0 and classified as critical. This vulnerability affects unknown code of the file viewfee.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2023-4192

A vulnerability, which was classified as critical, was found in SourceCodester Resort Reservation System 1.0. This affects an unknown part of the file manageuser.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2023-4193

CVE-2023-4193 affects SourceCodester Resort Reservation System 1.0, specifically the file view_fee.php. The vulnerability arises from manipulating the id parameter to trigger SQL injection, enabling remote exploitation. The entry notes a public exploit and a high-severity impact (NVD CVSS v3.1 ba...

CVE-2023-4193 SourceCodester Resort Reservation System view_fee.php sql injection

A vulnerability has been found in SourceCodester Resort Reservation System 1.0 and classified as critical. This vulnerability affects unknown code of the file viewfee.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been...