CVE-2020-29284

CVE-2020-29284 affects Sourcecodester Multi Restaurant Table Reservation System 1.0. The file view-chair-list.php does not validate the table_id parameter, enabling unauthenticated SQL injection via GET requests to /dashboard/view-chair-list.php?table_id=; multiple sources (NVD/Red Hat/Nuclei/NVD...

CVE-2020-35261

SourceCodester Multi Restaurant Table Reservation System 1.0 is affected by a Cross-Site Scripting (XSS) vulnerability exploitable via the Restaurant Name field in /dashboard/profile.php. The root cause is improper handling/validation of input in that field enabling script execution in the user c...

CVE-2020-36552

CVE-2020-36552 affects SourceCodester Multi Restaurant Table Reservation System 1.0. The vulnerability is a reflected XSS via the Made field to /dashboard/menu-list.php, allowing execution of arbitrary scripts in the context of the affected site. The NVD CVSS v3.1 base score is 5.4 (MEDIUM), with...

CVE-2020-36550

CVE-2020-36550 affects SourceCodester Multi Restaurant Table Reservation System 1.0. A cross-site scripting (XSS) vulnerability exists in the Table Name field processed by /dashboard/table-list.php, allowing injected scripts to be executed in the context of the web app. The issue is documented ac...

CVE-2020-36551

CVE-2020-36551 is an XSS vulnerability in SourceCodester Multi Restaurant Table Reservation System 1.0, exploitable via the Item Name field in /dashboard/menu-list.php. The available records identify the vulnerable component and entry point but do not provide exploit details, impacted versions be...

CVE-2020-36553

CVE-2020-36553 is an XSS vulnerability affecting SourceCodester Multi Restaurant Table Reservation System 1.0. The issue is triggered via the Area(food_type) field when accessing /dashboard/menu-list.php. Connected documents consistently describe a cross-site scripting vulnerability in the same p...

CVE-2021-44091

CVE-2021-44091 targets SourceCodester/ Courcecodester Multi Restaurant Table Reservation System 1.0. The XSS vulnerability occurs in register.php via the fullname, phone and address parameters, allowing injection of client-side code. Public documentation from multiple sources (CNVD/CNNVD, NVD/CVE...