CVE-2026-14695

A vulnerability was found in SourceCodester Multi-Vendor Online Grocery Management System 1.0. This affects the function saveclient of the file classes/Users.php of the component Registration Handler. The manipulation of the argument Name results in sql injection. It is possible to launch the...

CVE-2026-14695 SourceCodester Multi-Vendor Online Grocery Management System Registration Users.php save_client sql injection

A vulnerability was found in SourceCodester Multi-Vendor Online Grocery Management System 1.0. This affects the function saveclient of the file classes/Users.php of the component Registration Handler. The manipulation of the argument Name results in sql injection. It is possible to launch the...

CVE-2026-14692: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in SourceCodester Multi-Vendor Online Grocery Management System 1.0/5.7.26. Affected is the function saveshoptype of the file classes/Master.php of the component POST Parameter Handler. Performing a manipulation results in sql injection. The attack is possible to be...

CVE-2026-14693: Improper Authorization

A flaw has been found in SourceCodester Multi-Vendor Online Grocery Management System 1.0. Affected by this vulnerability is the function cancelorder of the file classes/Master.php. Executing a manipulation can lead to improper authorization. The attack may be performed from remote. The exploit h...

CVE-2026-14691: Improper Control of Generation of Code

A security vulnerability has been detected in SourceCodester Multi-Vendor Online Grocery Management System 1.0. This impacts the function updatesettingsinfo of the file classes/SystemSettings.php of the component Setting Handler. Such manipulation of the argument content leads to code injection...

CVE-2026-14695: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Multi-Vendor Online Grocery Management System 1.0. This affects the function saveclient of the file classes/Users.php of the component Registration Handler. The manipulation of the argument Name results in sql injection. It is possible to launch the...

CVE-2026-14694: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in SourceCodester Multi-Vendor Online Grocery Management System 1.0. Affected by this issue is the function cancelorder of the file classes/Master.php of the component POST Parameter Handler. The manipulation of the argument ID leads to sql injection. It is possible...

CVE-2026-14690: Improper Authorization

A weakness has been identified in SourceCodester Multi-Vendor Online Grocery Management System 1.0. This affects the function saveusers of the file classes/Users.php. This manipulation causes improper authorization. Remote exploitation of the attack is possible. The exploit has been made availabl...

CVE-2025-1192: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Multi Restaurant Table Reservation System 1.0. It has been classified as critical. Affected is an unknown function of the file select-menu.php. The manipulation of the argument table leads to sql injection. It is possible to launch the attack remotely...

CVE-2025-1191: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Multi Restaurant Table Reservation System 1.0 and classified as critical. This issue affects some unknown processing of the file /dashboard/approve-reject.php. The manipulation of the argument brejectid leads to sql injection. The attack may be initiate...

CVE-2024-13069: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester Multi Role Login System 1.0. It has been classified as problematic. Affected is an unknown function of the file /endpoint/add-user.php. The manipulation of the argument name leads to cross site scripting. It is possible to launch the attack remotely. Th...

CVE-2023-2565: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in SourceCodester Multi Language Hotel Management Software 1.0 and classified as problematic. This vulnerability affects unknown code of the file ajax.php of the component POST Parameter Handler. The manipulation of the argument complainttype with the input leads to...

CVE-2022-2648 SourceCodester Multi Language Hotel Management Software sql injection

A vulnerability was found in SourceCodester Multi Language Hotel Management Software. It has been rated as critical. This issue affects some unknown processing. The manipulation of the argument roomid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to...

CVE-2022-2656: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in SourceCodester Multi Language Hotel Management Software. Affected is an unknown function. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...

CVE-2022-2648: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Multi Language Hotel Management Software. It has been rated as critical. This issue affects some unknown processing. The manipulation of the argument roomid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to...

SourceCodester Multi Restaurant Table Reservation System跨站脚本漏洞（CNVD-2022-58179）

SourceCodester Multi Restaurant Table Reservation System is a multi-restaurant table reservation system. version 1.0 of SourceCodester Multi Restaurant Table Reservation System is vulnerable to a cross-site scripting vulnerability. An attacker can use this vulnerability to conduct cross-site...

SourceCodester Multi Restaurant Table Reservation System跨站脚本漏洞（CNVD-2022-58181）

SourceCodester Multi Restaurant Table Reservation System is a multi-restaurant table reservation system. version 1.0 of SourceCodester Multi Restaurant Table Reservation System is vulnerable to a cross-site scripting vulnerability. An attacker can exploit this vulnerability to conduct cross-site...

PT-2022-9001

Name of the Vulnerable Software and Affected Versions sourcecodester Multi Restaurant Table Reservation System version 1.0 Description The issue is related to a Cross Site Scripting XSS vulnerability. It can be exploited via the Made field to the "/dashboard/menu-list.php" API endpoint...

PT-2022-9000

Name of the Vulnerable Software and Affected Versions sourcecodester Multi Restaurant Table Reservation System version 1.0 Description The issue is related to a Cross Site Scripting XSS vulnerability. It can be exploited via the Item Name field to the "/dashboard/menu-list.php" API endpoint. This...

PT-2022-8924

Name of the Vulnerable Software and Affected Versions sourcecodester Multi Restaurant Table Reservation System version 1.0 Description The issue is related to a Cross Site Scripting XSS vulnerability. It can be exploited via the "Restaurant Name" field in the "/dashboard/profile.php" API endpoint...