CVE-2020-35378

SQL Injection in the login page in Online Bus Ticket Reservation 1.0 allows attackers to execute arbitrary SQL commands and bypass authentication via the username and password fields...

CVE-2020-35378

CVE-2020-35378 affects Online Bus Ticket Reservation 1.0. The login page is vulnerable to SQL injection via username/password fields, enabling arbitrary SQL execution and authentication bypass. Root cause appears to be lack of input validation on SQL statements. Affected version: 1.0. No remediat...

Sourcecodester Online Bus Ticket Reservation SQL注入漏洞

Sourcecodester Online Bus Ticket Reservation is an online bus ticketing platform from Sourcecodester USA. A SQL injection vulnerability exists in Online Bus Ticket Reservation version 1.0, which stems from a database-based application that lacks validation of externally-entered SQL statements. An...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-5021. Reason: This candidate is a reservation duplicate of CVE-2019-5021. Notes: All CVE users should reference CVE-2019-5021 instead of this candidate. All references and descriptions in this candidate have been removed to...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-5021. Reason: This candidate is a reservation duplicate of CVE-2019-5021. Notes: All CVE users should reference CVE-2019-5021 instead of this candidate. All references and descriptions in this candidate have been removed to...

Online Bus Ticket Reservation 1.0 SQL Injection

Exploit Title: Online Bus Ticket Reservation 1.0 - SQL Injection Date: 2020-12-07 Exploit Author: Sakshi Sharma Vendor Homepage: https://www.sourcecodester.com/php/5012/online-bus-ticket-reservation-using-phpmysql.html Software Link:...

Online Bus Ticket Reservation 1.0 - SQL Injection

Exploit Title: Online Bus Ticket Reservation 1.0 - SQL Injection Date: 2020-12-07 Exploit Author: Sakshi Sharma Vendor Homepage: https://www.sourcecodester.com/php/5012/online-bus-ticket-reservation-using-phpmysql.html Software Link:...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-29136. Reason: This candidate is a reservation duplicate of CVE-2020-29136. Notes: All CVE users should reference CVE-2020-29136 instead of this candidate. All references and descriptions in this candidate have been removed t...

CVE-2020-27641

CVE-2020-27641 is a reservation duplicate of CVE-2020-29136; all references/descriptions for this candidate were removed to prevent usage. Connected documents (e.g., CVE-2020-29136) describe a brute-force 2FA bypass in cPanel before 90.0.17.

CVE-2020-29561

An issue was discovered in SonicBOOM riscv-boom 3.0.0. For LR, it does not avoid acquiring a reservation in the case where a load translates successfully but still generates an exception...

Design/Logic Flaw

An issue was discovered in SonicBOOM riscv-boom 3.0.0. For LR, it does not avoid acquiring a reservation in the case where a load translates successfully but still generates an exception...

CVE-2020-29561

An issue was discovered in SonicBOOM riscv-boom 3.0.0. For LR, it does not avoid acquiring a reservation in the case where a load translates successfully but still generates an exception...

Berkeley Riscv-boom Security Vulnerability

The Berkeley Riscv-boom is a University of Berkeley USA for architectural research based on the RV64GC RISC-V kernel written in the Chisel hardware construction language. A security vulnerability exists in SonicBOOM riscv-boom version 3.0.0, which stems from the fact that for LR, it does not avoi...

CVE-2020-29284

The file view-chair-list.php in Multi Restaurant Table Reservation System 1.0 does not perform input validation on the tableid parameter which allows unauthenticated SQL Injection. An attacker can send malicious input in the GET request to /dashboard/view-chair-list.php?tableid= to trigger the...

Sql injection

The file view-chair-list.php in Multi Restaurant Table Reservation System 1.0 does not perform input validation on the tableid parameter which allows unauthenticated SQL Injection. An attacker can send malicious input in the GET request to /dashboard/view-chair-list.php?tableid= to trigger the...

CVE-2020-29284

The file view-chair-list.php in Multi Restaurant Table Reservation System 1.0 does not perform input validation on the tableid parameter which allows unauthenticated SQL Injection. An attacker can send malicious input in the GET request to /dashboard/view-chair-list.php?tableid= to trigger the...

CVE-2020-29284

CVE-2020-29284 affects Sourcecodester Multi Restaurant Table Reservation System 1.0. The file view-chair-list.php does not validate the table_id parameter, enabling unauthenticated SQL injection via GET requests to /dashboard/view-chair-list.php?table_id=; multiple sources (NVD/Red Hat/Nuclei/NVD...

SourceCodester Multi Restaurant Table Reservation System SQL Injection Vulnerability

SourceCodester Multi Restaurant Table Reservation System is a multi restaurant table reservation system from USSourceCodester. Multi Restaurant Table Reservation System version 1.0 has a SQL injection vulnerability that originates from /dashboard/view-chair-list.php?tableid=No input validation is...

Cayman Islands Bank Records Exposed in Open Azure Blob

A Cayman Island investment firm has removed years of backups, which up until recently were easily available online thanks to a misconfigured Microsoft Azure blob. The blob’s single URL led to vast stores of files including personal banking information, passport data and even online banking PINs —...

Multi Restaurant Table Reservation System 1.0 - Multiple Persistent XSS

Exploit Title: Multi Restaurant Table Reservation System 1.0 - Multiple Persistent XSS Date: 01-11-2020 Exploit Author: yunaranyancat Vendor Homepage: https://www.sourcecodester.com Software Link: https://www.sourcecodester.com/sites/default/files/download/janobe/tablereservation.zip Version: 1.0...