CVE-2024-2520

A vulnerability was found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/bookdate.php. The manipulation of the argument roomid leads to sql injection. The attack can be...

CVE-2024-2521

CVE-2024-2521 affects MAGESH-K21 Online-College-Event-Hall-Reservation-System v1.0. The vulnerability lies in the file /admin/bookdate.php where manipulating the id parameter triggers cross-site scripting. Exploitation can be performed remotely; the exploit has been publicly disclosed. Publicly a...

CVE-2024-2520

CVE-2024-2520 affects MAGESH-K21 Online-College-Event-Hall-Reservation-System v1.0. The vulnerability is a SQL injection in /admin/bookdate.php triggered by manipulating the room_id parameter. It is exploitable remotely and has been publicly disclosed. Public sources corroborate an unknown functi...

CVE-2024-2520 MAGESH-K21 Online-College-Event-Hall-Reservation-System bookdate.php sql injection

A vulnerability was found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/bookdate.php. The manipulation of the argument roomid leads to sql injection. The attack can be...

CVE-2024-2519 MAGESH-K21 Online-College-Event-Hall-Reservation-System navbar.php cross site scripting

A vulnerability was found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. It has been classified as problematic. Affected is an unknown function of the file navbar.php. The manipulation of the argument id leads to cross site scripting. It is possible to launch the attack remotely...

CVE-2024-2519

CVE-2024-2519 affects MAGESH-K21 Online-College-Event-Hall-Reservation-System v1.0. The vulnerability is a reflected XSS in navbar.php via the id parameter, exploitable remotely. Public exploit/disclosure exists. Red Hat and other sources corroborate the issue; no vendor response noted. PT-Securi...

CVE-2024-2518

The CVE-2024-2518 entry concerns MAGESH-K21 Online-College-Event-Hall-Reservation-System v1.0. A reflected Cross-Site Scripting flaw exists in the book_history.php file where manipulating the id parameter enables script execution in a victim’s browser. Some sources state the attack could be initi...

CVE-2024-2517

A vulnerability has been found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0 and classified as critical. This vulnerability affects unknown code of the file bookhistory.php. The manipulation of the argument delid leads to sql injection. The attack can be initiated remotely. The...

CVE-2024-2517

A vulnerability has been found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0 and classified as critical. This vulnerability affects unknown code of the file bookhistory.php. The manipulation of the argument delid leads to sql injection. The attack can be initiated remotely. The...

CVE-2024-2516

A vulnerability, which was classified as critical, was found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. This affects an unknown part of the file home.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit h...

CVE-2024-2516

A vulnerability, which was classified as critical, was found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. This affects an unknown part of the file home.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit h...

CVE-2024-2517 MAGESH-K21 Online-College-Event-Hall-Reservation-System book_history.php sql injection

A vulnerability has been found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0 and classified as critical. This vulnerability affects unknown code of the file bookhistory.php. The manipulation of the argument delid leads to sql injection. The attack can be initiated remotely. The...

CVE-2024-2517

CVE-2024-2517 affects MAGESH-K21 Online-College-Event-Hall-Reservation-System v1.0. The vulnerability is a SQL injection in the book_history.php file, triggered by manipulating the del_id parameter. It can be exploited remotely and the exploit has been disclosed publicly. Multiple sources corrobo...

CVE-2024-2515

A vulnerability, which was classified as problematic, has been found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. Affected by this issue is some unknown functionality of the file home.php. The manipulation of the argument id leads to cross site scripting. The attack may be...

CVE-2024-2515

A vulnerability, which was classified as problematic, has been found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. Affected by this issue is some unknown functionality of the file home.php. The manipulation of the argument id leads to cross site scripting. The attack may be...

CVE-2024-2515 MAGESH-K21 Online-College-Event-Hall-Reservation-System home.php cross site scripting

A vulnerability, which was classified as problematic, has been found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. Affected by this issue is some unknown functionality of the file home.php. The manipulation of the argument id leads to cross site scripting. The attack may be...

CVE-2024-2515

The CVE-2024-2515 issue affects MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0, specifically a vulnerability in the file home.php where manipulating the id parameter enables a cross-site scripting (XSS) flaw. The attack surface is remote over the network, with no user privileges requ...

CVE-2024-2514

A vulnerability classified as critical was found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. Affected by this vulnerability is an unknown functionality of the file /login.php. The manipulation of the argument email leads to sql injection. The attack can be launched remotely. T...

CVE-2024-2497 RaspAP raspap-webgui HTTP POST Request provider.php code injection

A vulnerability was found in RaspAP raspap-webgui 3.0.9 and classified as critical. This issue affects some unknown processing of the file includes/provider.php of the component HTTP POST Request Handler. The manipulation of the argument country leads to code injection. The attack may be initiate...

CVE-2024-2497 RaspAP raspap-webgui HTTP POST Request provider.php code injection

A vulnerability was found in RaspAP raspap-webgui 3.0.9 and classified as critical. This issue affects some unknown processing of the file includes/provider.php of the component HTTP POST Request Handler. The manipulation of the argument country leads to code injection. The attack may be initiate...