Kashipara Bus Ticket Reservation System 安全漏洞

Kashipara Bus Ticket Reservation System is a bus reservation system from Kashipara. A cross-site scripting vulnerability exists in Kashipara Bus Ticket Reservation System v1.0, which stems from the lack of effective filtering and escaping of user-supplied data in the bookingdate parameter of...

WordPress Event Tickets with Ticket Scanner plugin < 2.3.8 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Anas Jamal and Satyam Singh in WordPress Plugin Event Tickets with Ticket Scanner versions 2.3.8...

WordPress Event Tickets with Ticket Scanner Plugin < 2.3.8 is vulnerable to Cross Site Scripting (XSS)

Software Event Tickets with Ticket Scanner Type Plugin Vulnerable versions 2.3.8 Fixed in 2.3.8 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-6711 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 0bf7f36b041a Credits Anas Jam...

CVE-2024-7636

A vulnerability was found in code-projects Simple Ticket Booking 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file authenticate.php of the component Login. The manipulation of the argument email/password leads to sql injection. The attac...

CVE-2024-7636

A vulnerability was found in code-projects Simple Ticket Booking 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file authenticate.php of the component Login. The manipulation of the argument email/password leads to sql injection. The attac...

Code-Projects Simple Ticket Booking SQL注入漏洞

Code-Projects Simple Ticket Booking is a simple ticket booking system from Code-Projects open source. Code-Projects Simple Ticket Booking version 1.0 has a SQL injection vulnerability that originates from the name/email/dob/password/Gender/ phone parameter in the Registration Handler component of...

Code-Projects Simple Ticket Booking SQL注入漏洞

Code-Projects Simple Ticket Booking is a simple ticket booking system from Code-Projects open source. A SQL injection vulnerability exists in Code-Projects Simple Ticket Booking version 1.0, which is caused by a SQL injection vulnerability in the email/password parameter of the Login component of...

The vulnerability of the phpCAS::setUrl() function in the phpCAS authentication library allows a attacker to gain access to the user’s account.

The vulnerability of the phpCAS::setUrl function in the phpCAS authentication library relates to the use of HTTP headers to determine the URL address of the service used for ticket verification. This allows control over the host header and enables the use of a valid ticket for authentication in a...

CVE-2024-7636 code-projects Simple Ticket Booking Login authenticate.php sql injection

A vulnerability was found in code-projects Simple Ticket Booking 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file authenticate.php of the component Login. The manipulation of the argument email/password leads to sql injection. The attac...

CVE-2024-7636 code-projects Simple Ticket Booking Login authenticate.php sql injection

A vulnerability was found in code-projects Simple Ticket Booking 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file authenticate.php of the component Login. The manipulation of the argument email/password leads to sql injection. The attac...

CVE-2024-7635 code-projects Simple Ticket Booking Registration register_insert.php sql injection

A vulnerability was found in code-projects Simple Ticket Booking 1.0. It has been classified as critical. Affected is an unknown function of the file registerinsert.php of the component Registration Handler. The manipulation of the argument name/email/dob/password/Gender/phone leads to sql...

CVE-2024-7635 code-projects Simple Ticket Booking Registration register_insert.php sql injection

A vulnerability was found in code-projects Simple Ticket Booking 1.0. It has been classified as critical. Affected is an unknown function of the file registerinsert.php of the component Registration Handler. The manipulation of the argument name/email/dob/password/Gender/phone leads to sql...

CVE-2024-7635

CVE-2024-7635 affects Code-Projects Simple Ticket Booking 1.0, specifically the Registration Handler’s register_insert.php. The vulnerability is an SQL injection in the handling of name/email/dob/password/Gender/phone parameters, with remote exploitation possible and public disclosure of the expl...

CVE-2024-6200

HaloITSM versions up to 2.146.1 are affected by a Stored Cross-Site Scripting XSS vulnerability. The injected JavaScript code can execute arbitrary action on behalf of the user accessing a ticket. HaloITSM versions past 2.146.1 and patches starting from 2.143.61 fix the mentioned vulnerability...

Concert Ticket Reservation System 1.0 SQL Injection

====================================================================================================================================================== | Title : Concert Ticket Reservation System v1.0 Auth By Pass Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser :...

CVE-2024-7446

A vulnerability, which was classified as critical, was found in itsourcecode Ticket Reservation System 1.0. This affects an unknown part of the file listtickets.php. The manipulation of the argument prefSeatid leads to sql injection. It is possible to initiate the attack remotely. The exploit has...

CVE-2024-7446

A vulnerability, which was classified as critical, was found in itsourcecode Ticket Reservation System 1.0. This affects an unknown part of the file listtickets.php. The manipulation of the argument prefSeatid leads to sql injection. It is possible to initiate the attack remotely. The exploit has...

CVE-2024-7446 itsourcecode Ticket Reservation System list_tickets.php sql injection

A vulnerability, which was classified as critical, was found in itsourcecode Ticket Reservation System 1.0. This affects an unknown part of the file listtickets.php. The manipulation of the argument prefSeatid leads to sql injection. It is possible to initiate the attack remotely. The exploit has...

CVE-2024-7446

CVE-2024-7446 affects itsourcecode Ticket Reservation System 1.0. The vulnerability is in list_tickets.php, where manipulation of the prefSeat_id parameter enables SQL injection. It is exploitable remotely and public exploits have been disclosed. Multiple sources corroborate the issue, including ...

CVE-2024-7446 itsourcecode Ticket Reservation System list_tickets.php sql injection

A vulnerability, which was classified as critical, was found in itsourcecode Ticket Reservation System 1.0. This affects an unknown part of the file listtickets.php. The manipulation of the argument prefSeatid leads to sql injection. It is possible to initiate the attack remotely. The exploit has...