19 matches found
CVE-2026-105386
A vulnerability was identified in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. Affected by this issue is the function get of the file print.php. The manipulation of the argument transactionid leads to sql injection. It is possible to initiate the attack...
EUVD-2026-92620
A vulnerability was identified in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. Affected by this issue is the function get of the file print.php. The manipulation of the argument transactionid leads to sql injection. It is possible to initiate the attack...
CVE-2026-105386 onetwothreeneth HospitalManagementSystem print.php get sql injection
A vulnerability was identified in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. Affected by this issue is the function get of the file print.php. The manipulation of the argument transactionid leads to sql injection. It is possible to initiate the attack...
CVE-2026-105386 onetwothreeneth HospitalManagementSystem print.php get sql injection
A vulnerability was identified in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. Affected by this issue is the function get of the file print.php. The manipulation of the argument transactionid leads to sql injection. It is possible to initiate the attack...
CVE-2026-105386
The onetwothreeneth HospitalManagementSystem is vulnerable to a remote SQL injection vulnerability in the get function of the print.php file. An attacker can manipulate the transaction_id argument to execute unauthorized SQL commands. The product utilizes a rolling release, so specific affected o...
CVE-2026-105386 onetwothreeneth HospitalManagementSystem print.php get sql injection
A vulnerability was identified in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. Affected by this issue is the function get of the file print.php. The manipulation of the argument transactionid leads to sql injection. It is possible to initiate the attack...
CVE-2026-105385
A vulnerability was determined in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. Affected by this vulnerability is an unknown functionality of the file transactiondetails.php. Executing a manipulation of the argument transactionid can lead to sql injectio...
CVE-2026-105385 onetwothreeneth HospitalManagementSystem transaction_details.php sql injection
A vulnerability was determined in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. Affected by this vulnerability is an unknown functionality of the file transactiondetails.php. Executing a manipulation of the argument transactionid can lead to sql injectio...
EUVD-2026-92531
A vulnerability was determined in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. Affected by this vulnerability is an unknown functionality of the file transactiondetails.php. Executing a manipulation of the argument transactionid can lead to sql injectio...
CVE-2026-105385 onetwothreeneth HospitalManagementSystem transaction_details.php sql injection
A vulnerability was determined in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. Affected by this vulnerability is an unknown functionality of the file transactiondetails.php. Executing a manipulation of the argument transactionid can lead to sql injectio...
CVE-2026-105385 onetwothreeneth HospitalManagementSystem transaction_details.php sql injection
A vulnerability was determined in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. Affected by this vulnerability is an unknown functionality of the file transactiondetails.php. Executing a manipulation of the argument transactionid can lead to sql injectio...
CVE-2026-105385
A SQL injection vulnerability exists in the onetwothreeneth HospitalManagementSystem (up to commit 9ef91ed6007314b6473110ed699dff76d158f61d). The flaw is located within an unknown functionality of the transaction_details.php file, where a remote attacker can manipulate the transaction_id argument...
CVE-2026-105386: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was identified in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. Affected by this issue is the function get of the file print.php. The manipulation of the argument transactionid leads to sql injection. It is possible to initiate the attack...
CVE-2026-105385: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was determined in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. Affected by this vulnerability is an unknown functionality of the file transactiondetails.php. Executing a manipulation of the argument transactionid can lead to sql injectio...
CVE-2026-0585: Improper Neutralization of Special Elements used in an SQL Command
A security vulnerability has been detected in code-projects Online Product Reservation System 1.0. Impacted is an unknown function of the file /orderview.php of the component GET Parameter Handler. Such manipulation of the argument transactionid leads to sql injection. The attack can be executed...
CVE-2025-6449 code-projects Simple Online Hotel Reservation System checkout_query.php sql injection
A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/checkoutquery.php. The manipulation of the argument transactionid leads to sql injection. The attack may be...
CVE-2025-6451: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/deletepending.php. The manipulation of the argument transactionid leads to sql injection. The attack can be initiated...
CVE-2025-6449: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/checkoutquery.php. The manipulation of the argument transactionid leads to sql injection. The attack may be...
CVE-2025-6450: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/confirmreserve.php. The manipulation of the argument transactionid leads to sql injection. It is possible to initiate the atta...