CVE-2021-44091

A Cross-Site Scripting XSS vulnerability exists in Courcecodester Multi Restaurant Table Reservation System 1.0 in register.php via the 1 fullname, 2 phone, and 3 address parameters...

CVE-2021-44091

A Cross-Site Scripting XSS vulnerability exists in Courcecodester Multi Restaurant Table Reservation System 1.0 in register.php via the 1 fullname, 2 phone, and 3 address parameters...

CVE-2021-44091

CVE-2021-44091 targets SourceCodester/ Courcecodester Multi Restaurant Table Reservation System 1.0. The XSS vulnerability occurs in register.php via the fullname, phone and address parameters, allowing injection of client-side code. Public documentation from multiple sources (CNVD/CNNVD, NVD/CVE...

CVE-2021-44091

A Cross-Site Scripting XSS vulnerability exists in Courcecodester Multi Restaurant Table Reservation System 1.0 in register.php via the 1 fullname, 2 phone, and 3 address parameters...

CVE-2021-44091: Improper Neutralization of Input During Web Page Generation

A Cross-Site Scripting XSS vulnerability exists in Courcecodester Multi Restaurant Table Reservation System 1.0 in register.php via the 1 fullname, 2 phone, and 3 address parameters...

Online Railway Reservation System 1.0 - (Multiple) Stored Cross Site Scripting Vulnerability

Exploit Title: Online Railway Reservation System 1.0 - 'Multiple' Stored Cross Site Scripting XSS Unauthenticated Exploit Author: Zachary Asher Vendor Homepage: https://www.sourcecodester.com/php/15121/online-railway-reservation-system-phpoop-project-free-source-code.html Software Link:...

Online Railway Reservation System 1.0 Cross Site Scripting

Exploit Title: Online Railway Reservation System 1.0 - 'Multiple' Stored Cross Site Scripting XSS Unauthenticated Date: 07/01/2022 Exploit Author: Zachary Asher Vendor Homepage: https://www.sourcecodester.com/php/15121/online-railway-reservation-system-phpoop-project-free-source-code.html Softwar...

Sourcecodester Online Event Booking and Reservation System SQL Injection Vulnerability

Sourcecodester Online Event Booking and Reservation System is developed using PHP, MySQL database, HTML, CSS, Javascript, Bootstrap and AdminLTE. The system can be accessed by three types of users, namely system administrators, students, and instructors. sourcecodester Online Event Booking and...

CVE-2021-42667

A SQL Injection vulnerability exists in Sourcecodester Online Event Booking and Reservation System in PHP in event-management/views. An attacker can leverage this vulnerability in order to manipulate the sql query performed. As a result he can extract sensitive data from the web server and in som...

CVE-2021-42667

CVE-2021-42667 affects Sourcecodester Online Event Booking and Reservation System (version 2.3.0). The vulnerability is an SQL Injection in the event-management/views component, exploitable via the vulnerable id parameter on the USER page, enabling an attacker to manipulate SQL queries, potential...

CVE-2021-42663

Sourcecodester Online Event Booking and Reservation System 2.3.0 is affected by a cross-site scripting vulnerability (HTML injection) in the /event-management/index.php page, via the msg parameter. The vulnerable component is index.php; an attacker-supplied payload in msg can cause the victim to ...

CVE-2021-42662

CVE-2021-42662 is a Stored Cross-Site Scripting (XSS) vulnerability affecting the Sourcecodester Online Event Booking and Reservation System (PHP/MySQL). The issue is triggered via the holiday reason parameter (also referenced as reason/holiday field in various advisories) and can allow an attack...

CVE-2021-42667: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection vulnerability exists in Sourcecodester Online Event Booking and Reservation System in PHP in event-management/views. An attacker can leverage this vulnerability in order to manipulate the sql query performed. As a result he can extract sensitive data from the web server and in som...

CVE-2021-42663: Improper Neutralization of Input During Web Page Generation

An HTML injection vulnerability exists in Sourcecodester Online Event Booking and Reservation System in PHP/MySQL via the msg parameter to /event-management/index.php. An attacker can leverage this vulnerability in order to change the visibility of the website. Once the target user clicks on a...

CVE-2021-42662: Improper Neutralization of Input During Web Page Generation

A Stored Cross Site Scripting XSS vulnerability exists in Sourcecodester Online Event Booking and Reservation System in PHP/MySQL via the Holiday reason parameter. An attacker can leverage this vulnerability in order to run javascript commands on the web server surfers behalf, which can lead to...

Exploit for SQL Injection in Online_Event_Booking_And_Reservation_System_Project Online_Event_Booking_And_Reservation_System

CVE-2021-42667 CVE-2021-42667 - SQL Injection vulnerability in...

Exploit for Cross-site Scripting in Online_Event_Booking_And_Reservation_System_Project Online_Event_Booking_And_Reservation_System

CVE-2021-42663 CVE-2021-42662 - HTML Injection vulnerability i...

Exploit for Cross-site Scripting in Online_Event_Booking_And_Reservation_System_Project Online_Event_Booking_And_Reservation_System

CVE-2021-42663 CVE-2021-42662 - HTML Injection vulnerability i...

CVE-2021-41511

The username and password field of login in Lodging Reservation Management System V1 can give access to any user by using SQL injection to bypass authentication...

CVE-2021-41511

The username and password field of login in Lodging Reservation Management System V1 can give access to any user by using SQL injection to bypass authentication...