3575 matches found
Sql injection
Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /orrs/admin/reservations/viewdetails.php...
CVE-2022-33056
CVE-2022-33056 affects the SourceCodester Online Railway Reservation System v1.0. The vulnerability is a SQL injection in the admin schedules management page ( /orrs/admin/schedules/manage_schedule.php ) via the id parameter. Connected sources corroborate the issue but do not provide a patch vers...
CVE-2022-33056
Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /orrs/admin/schedules/manageschedule.php...
CVE-2022-33055
CVE-2022-33055 affects Online Railway Reservation System v1.0, with a SQL injection vulnerability in /orrs/admin/trains/manage_train.php via the id parameter. The root cause is a faulty id parameter that allows injected SQL statements. Documented impact is vulnerability to unauthorized data acces...
CVE-2022-33055
Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /orrs/admin/trains/managetrain.php...
CVE-2022-33049
CVE-2022-33049 affects Online Railway Reservation System v1.0, with a SQL injection vulnerability exploitable via the id parameter in /orrs/admin/?page=user/manage_user. Root cause: insufficient input validation allowing SQL injection. Impact details are not quantified beyond the generic SQLi ris...
CVE-2022-33049
Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /orrs/admin/?page=user/manageuser...
CVE-2022-33048
CVE-2022-33048 corresponds to a SQL injection vulnerability in Online Railway Reservation System v1.0, exploitable via the id parameter in /orrs/admin/reservations/view_details.php. The issue is repeatedly described across multiple records (NVD, Red Hat advisory, CNVD, CVE list, CNVD/CNNVD mirror...
CVE-2022-33048
Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /orrs/admin/reservations/viewdetails.php...
Online Railway Reservation system SQL注入漏洞
Sourcecodester Online Railway Reservation system is a web-based application that provides an online platform for rail or train station passengers or potential passengers to browse their schedules and reserve seats. sourceCodester Online Railway Reservation System v1.0 is vulnerable to a SQL...
Online Railway Reservation system SQL注入漏洞
Sourcecodester Online Railway Reservation system is a web-based application that provides an online platform for rail or train station passengers or potential passengers to browse their schedules and reserve seats. sourceCodester Online Railway Reservation System v1.0 is vulnerable to a SQL...
Online Railway Reservation system SQL注入漏洞
Sourcecodester Online Railway Reservation system is a web-based application that provides an online platform for rail or train station passengers or potential passengers to browse their schedules and reserve seats. sourceCodester Online Railway Reservation System v1.0 is vulnerable to a SQL...
CVE-2022-1836
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-33981. Reason: This candidate is a reservation duplicate of CVE-2022-33981. Notes: All CVE users should reference CVE-2022-33981 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2022-1836
CVE-2022-33981 affects the Linux kernel floppy driver. The issue is a concurrency use-after-free flaw in drivers/block/floppy.c before 5.17.6, triggered by use of raw_cmd after deallocation in raw_cmd_ioctl, leading to potential denial-of-service (kernel crash/memory corruption). Public advisorie...
CVE-2021-41662
The South Gate Inn Online Reservation System v1.0 contains an SQL injection vulnerability that can be chained with a malicious PHP file upload, which is caused by improper file handling in the editImg function. This vulnerability leads to remote code execution...
CVE-2021-41662
The South Gate Inn Online Reservation System v1.0 contains an SQL injection vulnerability that can be chained with a malicious PHP file upload, which is caused by improper file handling in the editImg function. This vulnerability leads to remote code execution...
Sql injection
The South Gate Inn Online Reservation System v1.0 contains an SQL injection vulnerability that can be chained with a malicious PHP file upload, which is caused by improper file handling in the editImg function. This vulnerability leads to remote code execution...
CVE-2021-41662
The South Gate Inn Online Reservation System v1.0 contains an SQL injection vulnerability that can be chained with a malicious PHP file upload, which is caused by improper file handling in the editImg function. This vulnerability leads to remote code execution...
CVE-2021-41662
CVE-2021-41662 affects South Gate Inn Online Reservation System v1.0. The vulnerability is an SQL injection that can be chained with a malicious PHP file upload caused by improper file handling in the editImg function, enabling remote code execution. Documented CVSSv3.1 impact is Critical (9.8) w...
South Gate Inn Online Reservation System SQL注入漏洞
South Gate Inn Online Reservation System is a hotel online reservation system by Janobe Individual Developer. A security vulnerability exists in South Gate Inn Online Reservation System v1.0, which stems from improper file handling in the editImg function and can be exploited by an attacker to...