CSV Injection in CSV files generated by the backend

1 First the admin create the event and publish it. 2 unauthenticated users go to the reservation page 3 unauthenticated users fill the fisrst name and last name as "=1+cmd|'/C calc'!A0" 4 admin download all the attendees' data as csv. 5 admin open the csv file and the calculator is opened. see th...

CVE-2023-27655

REJECT DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2019-9587. Reason: This record is a reservation duplicate of CVE-2019-9587. Notes: All CVE users should reference CVE-2019-9587 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage...

CVE-2023-1100

A vulnerability classified as critical has been found in SourceCodester Online Catering Reservation System 1.0. This affects an unknown part of the file /reservation/addmessage.php of the component POST Parameter Handler. The manipulation of the argument fullname leads to sql injection. It is...

CVE-2023-1100

A vulnerability classified as critical has been found in SourceCodester Online Catering Reservation System 1.0. This affects an unknown part of the file /reservation/addmessage.php of the component POST Parameter Handler. The manipulation of the argument fullname leads to sql injection. It is...

CVE-2023-1100 SourceCodester Online Catering Reservation System POST Parameter add_message.php sql injection

A vulnerability classified as critical has been found in SourceCodester Online Catering Reservation System 1.0. This affects an unknown part of the file /reservation/addmessage.php of the component POST Parameter Handler. The manipulation of the argument fullname leads to sql injection. It is...

CVE-2023-1100

The CVE-2023-1100 entry concerns SourceCodester Online Catering Reservation System 1.0. It identifies a vulnerability in the POST Parameter Handler, specifically the /reservation/add_message.php file, where the fullname parameter is vulnerable to SQL injection. The root cause is an injection flaw...

Online Catering Reservation System SQL注入漏洞

Online Catering Reservation System is an open source online catering reservation system. SourceCodester Online Catering Reservation System version 1.0 has a SQL injection vulnerability, the vulnerability stems from a problem in the file /reservation/addmessage.php, the operation of the parameter...

PT-2023-16754 · Sourcecodester · Sourcecodester Online Catering Reservation System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Catering Reservation System version 1.0 Description: A critical vulnerability has been found in the SourceCodester Online Catering Reservation System. This issue affects the file /reservation/add message.php of the...

CVE-2023-26936

REJECT DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2019-9587. Reason: This record is a reservation duplicate of CVE-2019-9587. Notes: All CVE users should reference CVE-2019-9587 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage...

CVE-2023-26934

REJECT DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2019-9587. Reason: This record is a reservation duplicate of CVE-2019-9587. Notes: All CVE users should reference CVE-2019-9587 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage...

CVE-2023-1036

A vulnerability was found in SourceCodester Dental Clinic Appointment Reservation System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /APR/signup.php of the component POST Parameter Handler. The manipulation of the argument firstname leads to cross...

Cross site scripting

A vulnerability was found in SourceCodester Dental Clinic Appointment Reservation System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /APR/signup.php of the component POST Parameter Handler. The manipulation of the argument firstname leads to cross...

CVE-2023-1037 SourceCodester Dental Clinic Appointment Reservation System POST Parameter login.php sql injection

A vulnerability was found in SourceCodester Dental Clinic Appointment Reservation System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /APR/login.php of the component POST Parameter Handler. The manipulation of the argument username leads to sql...

CVE-2023-1037

CVE-2023-1037 affects SourceCodester Dental Clinic Appointment Reservation System 1.0. The vulnerability is a SQL injection in the POST parameter handler for the file /APR/login.php where the username argument is manipulated. Exploitation can occur remotely and public exploitation has been disclo...

CVE-2023-1036

The CVE-2023-1036 issue affects SourceCodester Dental Clinic Appointment Reservation System v1.0, specifically the POST Parameter Handler in the /APR/signup.php file. The root cause is manipulation of the firstname parameter, leading to cross-site scripting. Impact is described as a remotely init...

Dental Clinic Appointment Reservation System SQL注入漏洞

Dental Clinic Appointment Reservation System is a Dental Clinic Appointment Reservation System by jkev Individual Developer. A SQL injection vulnerability exists in SourceCodester Dental Clinic Appointment Reservation System version 1.0, which is caused by an incorrect manipulation of the usernam...

Dental Clinic Appointment Reservation System 跨站脚本漏洞

Dental Clinic Appointment Reservation System is a Dental Clinic Appointment Reservation System by jkev Individual Developer. A cross-site scripting vulnerability exists in SourceCodester Dental Clinic Appointment Reservation System version 1.0, which stems from an incorrect manipulation of the...

CVE-2023-1030

A vulnerability has been found in SourceCodester/code-projects Online Boat Reservation System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /boat/login.php of the component POST Parameter Handler. The manipulation of the argument un lead...

CVE-2023-1030

A vulnerability has been found in SourceCodester/code-projects Online Boat Reservation System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /boat/login.php of the component POST Parameter Handler. The manipulation of the argument un lead...

Cross site scripting

A vulnerability has been found in SourceCodester Online Boat Reservation System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /boat/login.php of the component POST Parameter Handler. The manipulation of the argument un leads to cross sit...