Priority HIGH 73
Code-projects Hotel Managment System 1.0 allows SQL Injection via the 'pid' parameter in Hotel/admin/print.php?pid=2.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00698 · Published 2024-02-09 · No fix listed CWE-89
Priority HIGH 82
Code-projects Hotel Managment System 1.0 allows SQL Injection via the 'eid' parameter in Hotel/admin/usersettingdel.php?eid=2.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00749 · Published 2024-02-09 · No fix listed CWE-89
Priority HIGH 82
Code-projects Hotel Managment System 1.0, allows SQL Injection via the 'rid' parameter in Hotel/admin/roombook.php?rid=2.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00734 · Published 2024-02-09 · No fix listed CWE-89
Priority HIGH 82
Code-projects Hotel Managment System 1.0, allows SQL Injection via the 'sid' parameter in Hotel/admin/show.php?sid=2.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00734 · Published 2024-02-09 · No fix listed CWE-89
Priority MEDIUM 58
Tramyardg hotel-mgmt-system version 2022.4 is vulnerable to Cross Site Scripting (XSS) via process_update_profile.php.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00452 · Published 2023-01-13 · No fix listed CWE-79
Priority MEDIUM 62
Tramyardg hotel-mgmt-system version 2022.4 is vulnerable to SQL Injection via /app/dao/CustomerDAO.php.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00718 · Published 2023-01-13 · No fix listed CWE-89
Priority LOW 26
Multiple persistent cross-site scripting (XSS) vulnerabilities in index.php in tramyardg Hotel Management System 1.0 allow remote attackers to inject arbitrary web script or HTML via multiple parameters such as "fullname…
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00775 · Published 2022-09-12 · No fix listed CWE-79
Priority MEDIUM 58
A vulnerability classified as problematic has been found in SourceCodester Hotel Management System 2.0.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00592 · Published 2022-07-12 · No fix listed CWE-79
Priority MEDIUM 58
A vulnerability was found in SourceCodester Hotel Management System 2.0.
CVSS 3.1MEDIUM 5.4· Network · No auth · User interaction · EPSS 0.00674 · Published 2022-07-12 · No fix listed CWE-79
Priority MEDIUM 44
Hotel Management System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at the login page.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00964 · Published 2022-05-10 · No fix listed CWE-89
Priority LOW 29
Cross site scripting (XSS) vulnerability in tramyardg hotel-mgmt-system, allows attackers to execute arbitrary code when when /admin.php is loaded.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00792 · Published 2022-04-13 · No fix listed CWE-79
Priority LOW 37
A blind SQL injection vulnerability exists in the Raymart DG / Ahmed Helal Hotel-mgmt-system.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02377 · Published 2021-10-04 · No fix listed CWE-89
THREATIST.IORead the docs