CVE-2024-3352 SourceCodester Aplaya Beach Resort Online Reservation System index.php sql injection

A vulnerability has been found in SourceCodester Aplaya Beach Resort Online Reservation System 1.0 and classified as critical. This vulnerability affects unknown code of the file admin/modcomments/index.php. The manipulation of the argument id leads to sql injection. The attack can be initiated...

CVE-2024-3352

CVE-2024-3352 affects SourceCodester Aplaya Beach Resort Online Reservation System 1.0. The vulnerability is an SQL injection in the admin/mod_comments/index.php file, triggered by manipulating the id parameter. It is a remote issue with public disclosure of the exploit. Platforms: SourceCodester...

CVE-2024-3351

A vulnerability, which was classified as critical, was found in SourceCodester Aplaya Beach Resort Online Reservation System 1.0. This affects an unknown part of the file admin/modroomtype/index.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack...

CVE-2024-3350

A vulnerability, which was classified as critical, has been found in SourceCodester Aplaya Beach Resort Online Reservation System 1.0. Affected by this issue is some unknown functionality of the file admin/modroom/index.php. The manipulation of the argument id leads to sql injection. The attack m...

CVE-2024-3351

A vulnerability, which was classified as critical, was found in SourceCodester Aplaya Beach Resort Online Reservation System 1.0. This affects an unknown part of the file admin/modroomtype/index.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack...

CVE-2024-3351 SourceCodester Aplaya Beach Resort Online Reservation System index.php sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Aplaya Beach Resort Online Reservation System 1.0. This affects an unknown part of the file admin/modroomtype/index.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack...

CVE-2024-3350 SourceCodester Aplaya Beach Resort Online Reservation System index.php sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Aplaya Beach Resort Online Reservation System 1.0. Affected by this issue is some unknown functionality of the file admin/modroom/index.php. The manipulation of the argument id leads to sql injection. The attack m...

CVE-2024-3350 SourceCodester Aplaya Beach Resort Online Reservation System index.php sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Aplaya Beach Resort Online Reservation System 1.0. Affected by this issue is some unknown functionality of the file admin/modroom/index.php. The manipulation of the argument id leads to sql injection. The attack m...

CVE-2024-3348

A vulnerability classified as critical has been found in SourceCodester Aplaya Beach Resort Online Reservation System 1.0. Affected is an unknown function of the file booking/index.php. The manipulation of the argument logemail/logpword leads to sql injection. It is possible to launch the attack...

CVE-2024-3349

A vulnerability classified as critical was found in SourceCodester Aplaya Beach Resort Online Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file admin/login.php. The manipulation of the argument email leads to sql injection. The attack can be launched...

CVE-2024-3349

CVE-2024-3349 affects SourceCodester Aplaya Beach Resort Online Reservation System 1.0. Affected component: admin/login.php where the email parameter is injectable, leading to remote SQL injection. Root cause: improper handling of the email input in login logic. Impact: high confidentiality, inte...

CVE-2024-3347

A vulnerability was found in SourceCodester Airline Ticket Reservation System 1.0. It has been rated as critical. This issue affects some unknown processing of the file activatejetdetailsformhandler.php. The manipulation of the argument jetid leads to sql injection. The attack may be initiated...

CVE-2024-3346

A vulnerability was found in Byzoro Smart S80 up to 20240328. It has been declared as critical. This vulnerability affects unknown code of the file /log/webmailattach.php. The manipulation of the argument mailfilepath leads to os command injection. The attack can be initiated remotely. The exploi...

CVE-2024-3346 Byzoro Smart S80 webmailattach.php os command injection

A vulnerability was found in Byzoro Smart S80 up to 20240328. It has been declared as critical. This vulnerability affects unknown code of the file /log/webmailattach.php. The manipulation of the argument mailfilepath leads to os command injection. The attack can be initiated remotely. The exploi...

CVE-2024-3346 Byzoro Smart S80 webmailattach.php os command injection

A vulnerability was found in Byzoro Smart S80 up to 20240328. It has been declared as critical. This vulnerability affects unknown code of the file /log/webmailattach.php. The manipulation of the argument mailfilepath leads to os command injection. The attack can be initiated remotely. The exploi...

CVE-2024-3346

Byzoro Smart S80 (up to 20240328) contains an OS command injection vulnerability in /log/webmailattach.php via the mail_file_path parameter. This can be exploited remotely; the exploit has been disclosed publicly (VDB-259450). Affected product/version information is limited to the Byzoro Smart S8...

CVE-2024-3321

A vulnerability classified as problematic has been found in SourceCodester eLearning System 1.0. This affects an unknown part of the component Maintenance Module. The manipulation of the argument Subject Code/Description leads to cross site scripting. It is possible to initiate the attack remotel...

CVE-2024-3321 SourceCodester eLearning System Maintenance Module cross site scripting

A vulnerability classified as problematic has been found in SourceCodester eLearning System 1.0. This affects an unknown part of the component Maintenance Module. The manipulation of the argument Subject Code/Description leads to cross site scripting. It is possible to initiate the attack remotel...

CVE-2024-3321

The CVE-2024-3321 issue affects SourceCodester eLearning System 1.0 , specifically the Maintenance Module . The root cause is manipulation of the Subject Code/Description argument, enabling cross-site scripting (XSS) . The vulnerability allows remote initiation of an attack and has been publicly ...

CVE-2024-3320 SourceCodester eLearning System cross site scripting

A vulnerability was found in SourceCodester eLearning System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation of the argument page leads to cross site scripting. The attack may be launched remotely. The identifier of this vulnerability ...