CVE-2024-9359

The CVE-2024-9359 entry describes a SQL injection in code-projects Restaurant Reservation System 1.0, specifically affecting the /addcompany.php file where the company parameter is manipulated. The vulnerability is network-based with low attack complexity and no privileges required, potentially a...

CVE-2024-9085

The CVE-2024-9085 issue affects code-projects Restaurant Reservation System 1.0, where the date parameter in index.php enables SQL injection. The vulnerability can be triggered remotely by an unauthenticated attacker and, per PT-2024-39419, may allow unauthenticated remote code execution. Exploit...

CVE-2024-9811

CVE-2024-9811 affects code-projects Restaurant Reservation System 1.0, with a SQL injection in filter3.php triggered by the company parameter. The vulnerability is exploitable remotely and exploitation has been publicly disclosed. Multiple sources describe the issue as critical, affecting the fil...

CVE-2024-37800

CodeProjects Restaurant Reservation System v1.0 is affected by a reflected cross-site scripting (XSS) vulnerability triggered via the Date parameter in index.php. The issue is documented across multiple sources (CVE-2024-37800; NVD; CNNVD; CVELIST; PT-2024-27759; vulnrichment) and is described as...

CVE-2024-9360

CVE-2024-9360 affects Code-projects’ Restaurant Reservation System v1.0. The vulnerability is in the /updatebal.php file, where the input parameter company can be manipulated to perform a SQL injection . The issue is described as exploitable remotely and is publicly disclosed. Connected documents...

CVE-2024-9429

The CVE-2024-9429 entry concerns code-projects Restaurant Reservation System 1.0, where the vulnerability resides in the file /filter2.php. The root cause is an SQL injection vulnerability triggered by manipulating the from and (likely) to parameters, exploitable remotely. Multiple connected sour...

CVE-2024-37799

The CodeProjects Restaurant Reservation System v1.0 is vulnerable to a SQL injection vulnerability. The flaw originates from the improper neutralization of special elements used in an SQL command within the reserv_id parameter at the view_reservations.php endpoint. Exploitation of this vulnerabil...

CVE-2024-9086

Code-projects Restaurant Reservation System 1.0 contains a SQL injection in /filter.php. The vulnerability affects the from and (likely) to parameters, enabling remote exploitation. Multiple sources (NVD, Red Hat, CVE catalogs, and PT Security) corroborate a critical issue with exposed remote att...