17 matches found
CVE-2025-1900
The connected sources confirm CVE-2025-1900 affects PHPGurukul Restaurant Table Booking System 1.0, with a SQL injection in the /add-table.php file caused by manipulation of the tableno parameter. Attack vector is network/remote, with no user interaction required and no privileges required. Publi...
CVE-2025-1901
PHPGurukul Restaurant Table Booking System 1.0 is affected by a SQL injection in /admin/check_availability.php via the username parameter. The issue can be triggered remotely; exploitation has been disclosed publicly. Connected sources corroborate a critical impact due to SQL injection with remot...
CVE-2025-1906
The CVE-2025-1906 entry concerns PHPGurukul Restaurant Table Booking System 1.0. A vulnerability exists in the /admin/profile.php code path where manipulation of the mobilenumber parameter leads to a SQL injection. The issue is exploitable remotely, and the vulnerability is described as critical ...
CVE-2023-6075
The CVE-2023-6075 issue affects PHPGurukul Restaurant Table Booking System v1.0, specifically the Reservation Request Handler’s index.php function. The vulnerability is described as a cross-site scripting (XSS) flaw caused by manipulation in an unknown function of index.php, exploitable remotely....
CVE-2025-1952
CVE-2025-1952 affects PHPGurukul Restaurant Table Booking System 1.0. The vulnerability is an SQL injection in /admin/password-recovery.php via the username/mobileno parameter, caused by lack of input validation. It is exploitable remotely and has been publicly disclosed; multiple sources classif...
CVE-2025-5972
CVE-2025-5972 affects PHPGurukul Restaurant Table Booking System v1.0. The vulnerability exists in the /admin/manage-subadmins.php file, specifically in the manipulation of the fullname parameter, which leads to cross-site scripting (XSS). Multiple sources (CNVD/CNNVD, RH, NVD, CVE records) descr...
CVE-2023-6074
CVE-2023-6074 affects PHPGurukul Restaurant Table Booking System v1.0, specifically the check-status.php in the Booking Reservation Handler. The vulnerability is a SQL injection stemming from processing in that file, with remote exploitation implied. Connected sources (PT-Security PT-2023-32499, ...
CVE-2025-1894
The CVE-2025-1894 entry concerns PHPGurukul Restaurant Table Booking System 1.0. Affected component: /search-result.php. Root cause: manipulation of the searchdata parameter leads to SQL injection, enabling remote exploitation. Public exploit status is indicated in the initial description. While ...
CVE-2025-5974
The CVE-2025-5974 entry applies to PHPGurukul Restaurant Table Booking System 1.0. A vulnerability in /check-status.php arises from unsafely handling the searchdata parameter, enabling cross-site scripting. The issue could be exploited remotely and, according to public disclosures, the exploit is...
CVE-2025-3229
CVE-2025-3229 affects PHPGurukul Restaurant Table Booking System 1.0, with a SQL injection in edit-subadmin.php via the fullname parameter. The vulnerability enables remote attacker exploitation and may affect other parameters; multiple sources corroborate an untrusted SQL statement flow and data...
CVE-2023-6076
The CVE-2023-6076 entry concerns PHPGurukul Restaurant Table Booking System 1.0. The vulnerability affects the function in booking-details.php of the Reservation Status Handler, where manipulating the bid argument leads to information disclosure. It is described as exploitable remotely, impacting...
CVE-2023-7100
The CVE-2023-7100 entry describes a SQL injection in PHPGurukul’s Restaurant Table Booking System 1.0, stemming from an unknown function in /admin/bwdates-report-details.php. The vulnerability is triggered by manipulating the fdate (and tdate) parameter(s), allowing remote attacker access. Public...
CVE-2025-3215
CVE-2025-3215 affects PHPGurukul Restaurant Table Booking System v1.0, specifically the /admin/add-subadmin.php script. The root cause is improper validation of the fullname parameter, resulting in a SQL injection vulnerability. The issue can be exploited remotely and may allow an attacker to exe...
CVE-2024-51101
CVE-2024-51101 affects PHPGURUKUL Restaurant Table Booking System v1.0. A SQL injection vulnerability is exposed via the searchdata parameter in /rtbs/check-status.php. Exploitation could impact confidentiality, integrity, and availability (per CVSS 3.1: HIGH/CRITICAL). No patch details are provi...
CVE-2025-5973
PHPGurukul Restaurant Table Booking System 1.0 contains a cross-site scripting (XSS) flaw in the /admin/add-table.php file. The vulnerability arises from manipulation of the tableno parameter in an unknown functionality, enabling remote attacker input that can execute scripts in a user’s browser ...
CVE-2025-5970
CVE-2025-5970 affects PHPGurukul Restaurant Table Booking System 1.0. The vulnerability is in /admin/add-subadmin.php where manipulating the fullname parameter enables cross-site scripting (XSS). The issue is described as exploitable remotely, with the exploit disclosed publicly. Multiple sources...
CVE-2023-48016
Restaurant Table Booking System V1.0 is reported to be vulnerable to SQL Injection in rtbs/admin/index.php via the username parameter. Root cause: unsanitized input leading to SQLi. Impact per CVE/Metrics: high severity (CVSS 3.1 base score 7.5) with confidentiality impact but no integrity/availa...