Vulnerabilities

TI-2021-18895 CVE-2021-42667 · GHSA-xhx6-vv38-6mx5

A SQL Injection vulnerability exists in Sourcecodester Online Event Booking and…

MEDIUM 59

A SQL Injection vulnerability exists in Sourcecodester Online Event Booking and Reservation System in PHP in event-management/views.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.16173 Published 2021-11-05 No fix listed CWE-89

TI-2021-18891 CVE-2021-42663 · GHSA-948r-pr54-gh74

An HTML injection vulnerability exists in Sourcecodester Online Event Booking and…

LOW 27

An HTML injection vulnerability exists in Sourcecodester Online Event Booking and Reservation System in PHP/MySQL via the msg parameter to /event-management/index.php.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.03852 Published 2021-11-05 No fix listed CWE-79

TI-2021-18890 CVE-2021-42662 · GHSA-jw7x-fqhx-7gcf

A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Online Event…

LOW 28

A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Online Event Booking and Reservation System in PHP/MySQL via the Holiday reason parameter.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01674 Published 2021-11-05 No fix listed CWE-79

Vulnerabilities

Filters

A SQL Injection vulnerability exists in Sourcecodester Online Event Booking and…

An HTML injection vulnerability exists in Sourcecodester Online Event Booking and…

A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Online Event…