CVE-2024-3353

CVE-2024-3353 affects SourceCodester Aplaya Beach Resort Online Reservation System v1.0. The vulnerability is a SQL injection in admin/mod_reports/index.php via the categ/end parameter, enabling remote exploitation. Multiple sources confirm the issue; CVSS metrics indicate high severity with LOW ...

CVE-2024-3357

The CVE-2024-3357 issue affects SourceCodester Aplaya Beach Resort Online Reservation System v1.0, specifically the file admin/mod_reports/index.php. The vulnerability arises from manipulation of the end parameter, enabling cross-site scripting (XSS). Attackers can exploit remotely, and public di...

CVE-2024-3349

CVE-2024-3349 affects SourceCodester Aplaya Beach Resort Online Reservation System 1.0. Affected component: admin/login.php where the email parameter is injectable, leading to remote SQL injection. Root cause: improper handling of the email input in login logic. Impact: high confidentiality, inte...

CVE-2024-3354

CVE-2024-3354 affects SourceCodester Aplaya Beach Resort Online Reservation System v1.0. A SQL injection can be triggered via the id parameter in admin/mod_users/index.php, with remote access and a high/severe impact profile as described by multiple sources. The vulnerability arises from an unkno...

CVE-2024-3350

CVE-2024-3350 affects SourceCodester Aplaya Beach Resort Online Reservation System v1.0, specifically the admin/mod_room/index.php file. The root cause is a SQL injection vulnerability exposed by manipulating the id argument, allowing remote exploitation. Multiple sources confirm this vulnerabili...

CVE-2024-3352

CVE-2024-3352 affects SourceCodester Aplaya Beach Resort Online Reservation System 1.0. The vulnerability is an SQL injection in the admin/mod_comments/index.php file, triggered by manipulating the id parameter. It is a remote issue with public disclosure of the exploit. Platforms: SourceCodester...

CVE-2024-3358

CVE-2024-3358 affects SourceCodester Aplaya Beach Resort Online Reservation System v1.0. The vulnerability is a cross-site scripting (XSS) in the /index.php file caused by unsafely manipulated arguments (likely the to parameter). It can be exploited remotely, and public disclosure exists. Several...

CVE-2024-3355

CVE-2024-3355 affects SourceCodester Aplaya Beach Resort Online Reservation System 1.0. Affected is the unknown functionality at admin/mod_users/controller.php?action=add, where manipulating the name parameter triggers an SQL injection. The vulnerability is exploitable remotely and has been publi...

CVE-2024-3356

SourceCodester Aplaya Beach Resort Online Reservation System 1.0 contains an SQL injection in admin/mod_settings/controller.php?action=add caused by improper handling of the type parameter. The vulnerability is remotely exploitable and has been disclosed publicly, with high-impact implications fo...

CVE-2024-3351

SourceCodester Aplaya Beach Resort Online Reservation System 1.0 is affected by a SQL injection in the admin/mod_roomtype/index.php file via the id parameter. Exploitation can be performed remotely and has been disclosed publicly. The CVE entry notes a critical impact (NVD CVSSv3.1: 9.8) with hig...

CVE-2024-3348

CVE-2024-3348 affects SourceCodester Aplaya Beach Resort Online Reservation System v1.0. Affected is an unknown function in booking/index.php where manipulating log_email and log_pword triggers SQL injection. Attack can be launched remotely and the exploit has been disclosed publicly. The provide...