CVE-2022-31343

CVE-2022-31343 affects Online Car Wash Booking System v1.0. The vulnerability is a SQL Injection in the admin view: /ocwbs/admin/?page=bookings/view_details&id=, caused by lack of input validation for the id parameter. CVSS indicators in the entry show high/critical impact (C/I/A: Partial/Partial...

CVE-2022-31342

Online Car Wash Booking System v1.0 is vulnerable to arbitrary file deletion via /ocwbs/classes/Master.php?f=delete_img, due to lack of validation for file names in Master.php. Affected component/file: Master.php (delete_img). Consequences stated: arbitrary deletion of files. Connected Red Hat/CV...

CVE-2022-31345

CVE-2022-31345 affects Online Car Wash Booking System v1.0. Vulnerability: SQL Injection via /ocwbs/admin/?page=user/manage_user&id=. Root cause: input is not validated in the manage_user endpoint, enabling arbitrary SQL execution. Impact: potential exposure/alteration of database data as describ...

CVE-2022-31352

The CVE-2022-31352 entry affects Online Car Wash Booking System v1.0 (oreo tn om23) and is caused by an SQL injection in /ocwbs/admin/services/manage_service.php?id=. The connected documents confirm the vulnerability as a SQL injection due to input validation gaps, enabling potentially unauthoriz...

CVE-2022-31347

CVE-2022-31347 affects Online Car Wash Booking System v1.0. The vulnerability is a SQL Injection via /ocwbs/classes/Master.php?f=delete_vehicle. The issue arises from improper validation/sanitization of external input in that endpoint, enabling attackers to craft input that manipulates SQL statem...

CVE-2022-31351

CVE-2022-31351 affects Online Car Wash Booking System v1.0 by oretnom23. The flaw is a SQL injection in /ocwbs/admin/services/manage_price.php?id=, caused by unsanitized external input. This vulnerability is repeatedly reported across multiple feeds (NVD, Red Hat, CNVD/CNNVD, etc.) with high seve...

CVE-2022-31344

Online Car Wash Booking System v1.0 is vulnerable to SQL Injection at /ocwbs/classes/Master.php?f=delete_booking. The Red Hat, CNVD, CNNVD, and NVD records corroborate a persistent SQLi flaw originating from lacking input validation in that endpoint, enabling potential unauthorized data access or...

CVE-2022-31350

Online Car Wash Booking System v1.0 is vulnerable to SQL Injection through /ocwbs/admin/vehicles/manage_vehicle.php?id=. The vulnerability is corroborated by multiple connected reports (e.g., Red Hat CVE RH:CVE-2022-31350, CNVD-2022-53349) and is attributed to lack of input validation that allows...

CVE-2022-31353

CVE-2022-31353 affects Online Car Wash Booking System v1.0. The issue is a SQL injection in /ocwbs/admin/services/view_service.php?id=, allowing attacker-controlled input to influence SQL queries. The CVE is tracked in multiple feeds (NVD entry and Red Hat/CNVD/CVE lists) with a high to critical ...

CVE-2022-31354

CVE-2022-31354 affects Online Car Wash Booking System v1.0, where a SQL injection vulnerability exists in /ocwbs/classes/Master.php?f=get_vehicle_service. The root cause is unsanitized external input used in SQL statements, enabling an attacker to manipulate queries and potentially access or modi...

CVE-2022-31346

CVE-2022-31346 affects Online Car Wash Booking System v1.0. The vulnerability is a SQL Injection in the delete_service path handled by /ocwbs/classes/Master.php?f=delete_service, caused by lack of validation of external input. Impact per sources includes potential exposure of sensitive data and f...

CVE-2022-31348

CVE-2022-31348 affects Online Car Wash Booking System v1.0. The vulnerability is a SQL Injection in /ocwbs/admin/bookings/update_status.php?id=, caused by lack of input validation for external SQL statements. Impact described as potential data exposure/illicit database access; exploitation detail...

CVE-2024-5385

CVE-2024-5385 affects oretnom23 Online Car Wash Booking System 1.0. A cross-site scripting flaw exists in the /admin/?page=user/list endpoint triggered by manipulating the First Name/Last Name field with a script payload. The issue is exploitable remotely and involves user interaction. Documented...