169 resultados
7.3Alta
CVE-2026-114441

oretnom23 php-travel-agency-system update.php sql injection

oretnom23 php-travel-agency-system

A weakness has been identified in oretnom23 php-travel-agency-system. This issue affects some unknown processing of the file admin/update.php. This manipulation of the argument action/full_name/visa_no/hiden/title/description/page_id/user causes sql injection…

7.3Alta
CVE-2026-114440

oretnom23 php-travel-agency-system delete.php sql injection

oretnom23 php-travel-agency-system

A vulnerability was identified in oretnom23 php-travel-agency-system. This affects an unknown part of the file admin/delete.php. The manipulation of the argument costomer_id/ticket_id/payment_id/id/document_id/salary_id/emp_id/user_id leads to sql injection. …

2.4Baja
CVE-2026-9564

SourceCodester/oretnom23 Hospitals Patient Records Management System view_patient cross site scripting

SourceCodester Hospitals Patient Records Management System; oretnom23 Hospitals Patient Records Management System

A vulnerability was found in SourceCodester/oretnom23 Hospitals Patient Records Management System 1.0. The impacted element is an unknown function of the file /admin/?page=patients/view_patient. Performing a manipulation of the argument Remarks results in cro…

2.7Baja
CVE-2026-36947
oretnom23 computer and mobile repair shop management system

Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerable to SQL Injection in the file /rsms/admin/services/view_service.php.

2.7Baja
CVE-2026-36946
oretnom23 computer and mobile repair shop management system

Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerable to SQL injection in the file /rsms/admin/inquiries/view_details.php.

2.7Baja
CVE-2026-36923
oretnom23 cab management system

Sourcecodester Cab Management System 1.0 is vulnerable to SQL Injection in the file /cms/admin/bookings/view_booking.php.

2.7Baja
CVE-2026-36922
oretnom23 cab management system

Sourcecodester Cab Management System v1.0 is vulnerable to SQL injection in the file /cms/admin/categories/view_category.php.

6.5Media
CVE-2026-30523
oretnom23 loan management system

A Business Logic vulnerability exists in SourceCodester Loan Management System v1.0 due to the lack of proper input validation. The application allows administrators to define "Loan Plans" which determine the duration of a loan (in months). However, the backe…

6.5Media
CVE-2026-30522
oretnom23 loan management system

A Business Logic vulnerability exists in SourceCodester Loan Management System v1.0 due to improper server-side validation. The application allows administrators to create "Loan Plans" with specific penalty rates for overdue payments. While the frontend inter…

6.5Media
CVE-2026-30521
oretnom23 loan management system

A Business Logic vulnerability exists in SourceCodester Loan Management System v1.0 due to improper server-side validation. The application allows administrators to create "Loan Plans" with specific interest rates. While the frontend interface prevents users …