online_event_booking_and_reservation_system 漏洞

严重CVE-2021-426672021/11/05

Online Event Booking and Reservation System 2.3.0 - SQL Injection

Online Event Booking and Reservation System 2.3.0 contains a SQL injection vulnerability in event-management/views. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site.

online_event_booking_and_reservation_systemPoC 已收录

CVSS9.8EPSS 72.4%

中危CVE-2021-426632021/11/05

Sourcecodester Online Event Booking and Reservation System 2.3.0 - Cross-Site Scripting

Sourcecodester Online Event Booking and Reservation System 2.3.0 contains a cross-site scripting vulnerability in PHP/MySQL via the msg parameter to /event-management/index.php. An attacker can leverage this vulnerability in order to change the visibility of the website. Once the target user clicks on a given link, the content of the HTML code of the attacker's choice displays.

online_event_booking_and_reservation_systemPoC 已收录

CVSS4.3EPSS 38.0%

online_event_booking_and_reservation_system

关联漏洞

Online Event Booking and Reservation System 2.3.0 - SQL Injection

Sourcecodester Online Event Booking and Reservation System 2.3.0 - Cross-Site Scripting