CVE-2024-9085

A vulnerability was found in code-projects Restaurant Reservation System 1.0. It has been rated as critical. This issue affects some unknown processing of the file index.php. The manipulation of the argument date leads to sql injection. The attack may be initiated remotely. The exploit has been...

CVE-2024-9085

A vulnerability was found in code-projects Restaurant Reservation System 1.0. It has been rated as critical. This issue affects some unknown processing of the file index.php. The manipulation of the argument date leads to sql injection. The attack may be initiated remotely. The exploit has been...

CVE-2024-9085

The CVE-2024-9085 issue affects code-projects Restaurant Reservation System 1.0, where the date parameter in index.php enables SQL injection. The vulnerability can be triggered remotely by an unauthenticated attacker and, per PT-2024-39419, may allow unauthenticated remote code execution. Exploit...

CVE-2024-9085 code-projects Restaurant Reservation System index.php sql injection

A vulnerability was found in code-projects Restaurant Reservation System 1.0. It has been rated as critical. This issue affects some unknown processing of the file index.php. The manipulation of the argument date leads to sql injection. The attack may be initiated remotely. The exploit has been...

CVE-2024-9085 code-projects Restaurant Reservation System index.php sql injection

A vulnerability was found in code-projects Restaurant Reservation System 1.0. It has been rated as critical. This issue affects some unknown processing of the file index.php. The manipulation of the argument date leads to sql injection. The attack may be initiated remotely. The exploit has been...

Code-Projects Restaurant Reservation System SQL注入漏洞

Code-Projects Restaurant Reservation System is an open source restaurant reservation system from Code-Projects. A SQL injection vulnerability exists in Code-Projects Restaurant Reservation System version 1.0, which stems from an incorrect manipulation of the from and to parameters that can lead t...

Code-Projects Restaurant Reservation System SQL注入漏洞

Code-Projects Restaurant Reservation System is a Code-Projects open source restaurant reservation system. A SQL injection vulnerability exists in Code-Projects Restaurant Reservation System version 1.0, which stems from an incorrect operation of the parameter date that can lead to SQL injection...

PT-2024-39419 · Code Projects · Code-Projects Restaurant Reservation System

Name of the Vulnerable Software and Affected Versions: code-projects Restaurant Reservation System version 1.0 Description: A critical issue affects the processing of the file index.php, where the manipulation of the date argument leads to SQL injection. The attack can be initiated remotely. The...

CVE-2024-43985

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in MagePeople Team Bus Ticket Booking with Seat Reservation allows Stored XSS.This issue affects Bus Ticket Booking with Seat Reservation: from n/a through 5.3.5...

CVE-2024-43985 WordPress Bus Ticket Booking with Seat Reservation plugin <= 5.3.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in MagePeople Team Bus Ticket Booking with Seat Reservation allows Stored XSS.This issue affects Bus Ticket Booking with Seat Reservation: from n/a through 5.3.5...

CVE-2024-43985 WordPress Bus Ticket Booking with Seat Reservation plugin <= 5.3.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in MagePeople Team Bus Ticket Booking with Seat Reservation allows Stored XSS.This issue affects Bus Ticket Booking with Seat Reservation: from n/a through 5.3.5...

CVE-2024-8951

A vulnerability classified as problematic was found in SourceCodester Resort Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file managefee.php. The manipulation of the argument toview leads to cross site scripting. The attack can be launched remotely. Th...

CVE-2024-8951

A vulnerability classified as problematic was found in SourceCodester Resort Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file managefee.php. The manipulation of the argument toview leads to cross site scripting. The attack can be launched remotely. Th...

CVE-2024-8951

The CVE-2024-8951 entry covers a cross-site scripting vulnerability in SourceCodester Resort Reservation System 1.0, arising from manipulation of the toview argument in the manage_fee.php file. The vulnerability is described as exploitable remotely, with public disclosure of the exploit. Connecte...

Resort Reservation System 跨站脚本漏洞

Resort Reservation System is a resort reservation system by Carlo Montero, a personal developer. A cross-site scripting vulnerability exists in Resort Reservation System version 1.0, which stems from improper handling of the toview parameter in the managefee.php file and could lead to a cross-sit...

PT-2024-30849 · Magepeople · Magepeople Team Bus Ticket Booking With Seat Reservation

Name of the Vulnerable Software and Affected Versions: MagePeople Team Bus Ticket Booking with Seat Reservation versions through 5.3.5 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored X...

WordPress plugin Bus Ticket Booking with Seat Reservation 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in the WordPre...

kernel: mm/hugetlb: fix missing hugetlb_lock for resv uncharge

CVE-2024-36000 addresses a synchronization issue in the Linux kernel's management of huge pages. The problem arises when multiple threads modify the reservation map concurrently without proper locking, leading to potential inconsistencies and system instability...

CVE-2024-45299

alf.io is an open source ticket reservation system for conferences, trade shows, workshops, and meetups. Prior to version 2.0-M5, the preloaded data as json is not escaped correctly, the administrator / event admin could break their own install by inserting non correctly escaped text. The...

CVE-2024-45300

alf.io is an open source ticket reservation system for conferences, trade shows, workshops, and meetups. Prior to version 2.0-M5, a race condition allows the user to bypass the limit on the number of promo codes and use the discount coupon multiple times. In "alf.io", an event organizer can apply...