5 matches found
CVE-2026-36938: Improper Neutralization of Special Elements used in an SQL Command
Sourcecodester Online Resort Management System v1.0 is vulnerable to SQL injection in /orms/admin/rooms/viewroom.php...
CVE-2026-36938
The Sourcecodester Online Resort Management System v1.0 is vulnerable to SQL injection within the /orms/admin/rooms/view_room.php file. This vulnerability allows an attacker to exploit improper neutralization of special elements used in an SQL command. While the technical impact is categorized as...
EUVD-2023-33853
Malicious code in bioql PyPI...
CVE-2023-2363: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in SourceCodester Resort Reservation System 1.0. This issue affects some unknown processing of the file viewroom.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has...
CVE-2022-32346: Improper Neutralization of Special Elements used in an SQL Command
Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/admin/rooms/viewroom.php?id=...