CVE-2024-6084

CVE-2024-6084 affects the Bethesda/itsourcecode Pool Online Reservation System up to version 1.0. The vulnerable component is the uploadImage function in /admin/mod_room/controller.php?action=add, where manipulating the image argument enables unrestricted file uploads. This vulnerability can be e...

CVE-2024-6112

CVE-2024-6112 affects the Pool of Bethesda Online Reservation System (version 1.0) in itsourcecode. The vulnerability resides in the index.php file, where manipulation of the log_email parameter leads to SQL injection. This can be triggered remotely and, per multiple sources, exploitation has bee...

CVE-2024-6111

The CVE-2024-6111 entry describes a SQL injection in Bethesda Online Reservation System (itsourcecode Pool of Bethesda Online Reservation System) version 1.0, affecting an unknown portion of login.php. The root cause is manipulation of the email parameter, enabling remote exploitation with disclo...

CVE-2024-6371

CVE-2024-6371 affects the Pool of Bethesda Online Reservation System v1.0. The vulnerability is a SQL injection in the rmtype_id parameter of controller.php, exploitable remotely. Multiple sources describe it as critical/high-impact, with the potential for unauthorized data exposure or manipulati...