CVE-2025-8966: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in itsourcecode Online Tour and Travel Management System 1.0. This issue affects some unknown processing of the file /admin/operations/tax.php. The manipulation of the argument tname leads to sql injection. The attack may be initiated remotely. The exploit has been...

CVE-2025-7143 SourceCodester Best Salon Management System Update Tax Page edit-tax.php cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester Best Salon Management System 1.0. This affects an unknown part of the file /panel/edit-tax.php of the component Update Tax Page. The manipulation of the argument Tax Name leads to cross site scripting. It is possibl...

CVE-2025-7143: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in SourceCodester Best Salon Management System 1.0. This affects an unknown part of the file /panel/edit-tax.php of the component Update Tax Page. The manipulation of the argument Tax Name leads to cross site scripting. It is possibl...

CVE-2025-6879

CVE-2025-6879 affects SourceCodester Best Salon Management System 1.0. Multiple sources confirm a vulnerability in the file /panel/add-tax.php where manipulation of the Name parameter leads to SQL injection. The attack surface is remote, with high-severity implications (SQL injection could impact...

CVE-2025-6880: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in SourceCodester Best Salon Management System 1.0. Affected is an unknown function of the file /panel/edit-tax.php. The manipulation of the argument editid leads to sql injection. It is possible to launch the attack remotely. The exploit has...

CVE-2025-6879: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /panel/add-tax.php. The manipulation of the argument Name leads to sql injection. The attack may be initiated remotely. The exploit h...

CVE-2022-32992

Online Tours And Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the tname parameter at /admin/operations/tax.php...

CVE-2024-35409

WeBid 1.1.2 is vulnerable to SQL Injection via admin/tax.php...

CVE-2024-35409

WeBid 1.1.2 is vulnerable to SQL Injection via admin/tax.php...

CVE-2024-35409

WeBid version 1.1.2 , an open-source auction website building solution, is vulnerable to SQL Injection via the admin/tax.php endpoint. This vulnerability (CWE-89) allows for potential unauthorized access to database information . No patch or newer version with a fix is currently specified; howeve...

CVE-2024-35409: Improper Neutralization of Special Elements used in an SQL Command

WeBid 1.1.2 is vulnerable to SQL Injection via admin/tax.php...

CVE-2022-32992

Online Tours And Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the tname parameter at /admin/operations/tax.php...

Sql injection

Online Tours And Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the tname parameter at /admin/operations/tax.php...

CVE-2022-32992

Online Tours And Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the tname parameter at /admin/operations/tax.php...

PT-2022-21626

Name of the Vulnerable Software and Affected Versions Online Tours And Travels Management System version 1.0 Description A SQL injection issue was found in the tname parameter at the "/admin/operations/tax.php" API endpoint. Recommendations For Online Tours And Travels Management System version...

CVE-2022-32992: Improper Neutralization of Special Elements used in an SQL Command

Online Tours And Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the tname parameter at /admin/operations/tax.php...