Vulnerabilities

TI-2024-28619 CVE-2024-42776 · GHSA-q4pc-gw9h-vxg4

Kashipara Hotel Management System v1.0 is vulnerable to Incorrect Access Control via /admin/users.php.

HIGH 67

Kashipara Hotel Management System v1.0 is vulnerable to Incorrect Access Control via /admin/users.php.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00535 Published 2024-08-22 No fix listed CWE-284

TI-2024-28618 CVE-2024-42775 · GHSA-7pcw-pq39-gmc3

An Incorrect Access Control vulnerability was found in /admin/add_room_controller.php in…

HIGH 80

An Incorrect Access Control vulnerability was found in /admin/add_room_controller.php in Kashipara Hotel Management System v1.0, which allows an unauthenticated attacker to add the valid hotel room entries in the adminis…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00484 Published 2024-08-22 No fix listed CWE-284

TI-2024-28617 CVE-2024-42774 · GHSA-5wfc-h7w4-43mx

An Incorrect Access Control vulnerability was found in /admin/delete_room.php in…

HIGH 72

An Incorrect Access Control vulnerability was found in /admin/delete_room.php in Kashipara Hotel Management System v1.0, which allows an unauthenticated attacker to delete valid hotel room entries in the administrator se…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00412 Published 2024-08-22 No fix listed CWE-269

TI-2024-28616 CVE-2024-42773 · GHSA-prg4-487r-rr8w

An Incorrect Access Control vulnerability was found in /admin/edit_room_controller.php in…

MEDIUM 48

An Incorrect Access Control vulnerability was found in /admin/edit_room_controller.php in Kashipara Hotel Management System v1.0, which allows an unauthenticated attacker to edit the valid hotel room entries in the admin…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00484 Published 2024-08-22 No fix listed CWE-863

TI-2024-28615 CVE-2024-42772 · GHSA-8p8r-qjjp-c996

An Incorrect Access Control vulnerability was found in /admin/rooms.php in Kashipara…

HIGH 72

An Incorrect Access Control vulnerability was found in /admin/rooms.php in Kashipara Hotel Management System v1.0, which allows an unauthenticated attacker to view valid hotel room entries in administrator section.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00484 Published 2024-08-22 No fix listed CWE-284

TI-2024-28614 CVE-2024-42771 · GHSA-96g3-59vf-qvw4

A Stored Cross Site Scripting (XSS) vulnerability was found in "…

MEDIUM 55

A Stored Cross Site Scripting (XSS) vulnerability was found in " /admin/edit_room_controller.php" of the Kashipara Hotel Management System v1.0, which allows remote attackers to execute arbitrary code via "room_name" par…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.0045 Published 2024-08-22 No fix listed CWE-79

TI-2024-28613 CVE-2024-42770 · GHSA-g4v9-cgh3-4j6f

A Stored Cross Site Scripting (XSS) vulnerability was found in "/core/signup_user.php" of…

MEDIUM 55

A Stored Cross Site Scripting (XSS) vulnerability was found in "/core/signup_user.php" of Kashipara Hotel Management System v1.0, which allows remote attackers to execute arbitrary code via the "user_email" parameter.

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.00514 Published 2024-08-22 No fix listed CWE-79

TI-2024-28612 CVE-2024-42769 · GHSA-mpg7-9mg3-3974

A Reflected Cross Site Scripting (XSS) vulnerability was found in "/core/signup_user.php…

MEDIUM 60

A Reflected Cross Site Scripting (XSS) vulnerability was found in "/core/signup_user.php " of Kashipara Hotel Management System v1.0, which allows remote attackers to execute arbitrary code via "user_fname" and "user_lna…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0047 Published 2024-08-22 No fix listed CWE-79

TI-2024-28611 CVE-2024-42768 · GHSA-cfrq-8q2f-rp46

A Cross-Site Request Forgery (CSRF) vulnerability was found in Kashipara Hotel Management…

MEDIUM 63

A Cross-Site Request Forgery (CSRF) vulnerability was found in Kashipara Hotel Management System v1.0 via /admin/delete_room.php.

CVSS 3.1MEDIUM 6.8 Network Low privileges User interaction EPSS 0.00182 Published 2024-08-22 No fix listed CWE-352

TI-2024-28610 CVE-2024-42767 · GHSA-8v9c-gh64-hq64

Kashipara Hotel Management System v1.0 is vulnerable to Unrestricted File Upload RCE via /admin/add_room_controller.php.

HIGH 67

Kashipara Hotel Management System v1.0 is vulnerable to Unrestricted File Upload RCE via /admin/add_room_controller.php.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00579 Published 2024-08-22 No fix listed CWE-434

TI-2023-26908 CVE-2023-49272 · GHSA-j6r8-x8pp-9mcq

Hotel Management v1.0 - Multiple Reflected Cross-Site Scripting (XSS)

LOW 25

Hotel Management v1.0 is vulnerable to multiple authenticated Reflected Cross-Site Scripting vulnerabilities.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00374 Published 2023-12-20 No fix listed CWE-79

TI-2023-26907 CVE-2023-49271 · GHSA-9g9h-7mhh-5mcr

Hotel Management v1.0 - Multiple Reflected Cross-Site Scripting (XSS)

LOW 25

Hotel Management v1.0 is vulnerable to multiple authenticated Reflected Cross-Site Scripting vulnerabilities.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00383 Published 2023-12-20 No fix listed CWE-79

TI-2023-26906 CVE-2023-49270 · GHSA-ppqr-xhhp-8qc5

Hotel Management v1.0 - Multiple Reflected Cross-Site Scripting (XSS)

LOW 25

Hotel Management v1.0 is vulnerable to multiple authenticated Reflected Cross-Site Scripting vulnerabilities.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00383 Published 2023-12-20 No fix listed CWE-79

TI-2023-26905 CVE-2023-49269 · GHSA-372v-gvcg-hfrh

Hotel Management v1.0 - Multiple Reflected Cross-Site Scripting (XSS)

LOW 25

Hotel Management v1.0 is vulnerable to multiple authenticated Reflected Cross-Site Scripting vulnerabilities.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00368 Published 2023-12-20 No fix listed CWE-79

Vulnerabilities

Filters