Filtered by vendor Online Event Booking And Reservation System Project Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2021-42667 1 Online Event Booking And Reservation System Project 1 Online Event Booking And Reservation System 2024-11-21 9.8 Critical
A SQL Injection vulnerability exists in Sourcecodester Online Event Booking and Reservation System in PHP in event-management/views. An attacker can leverage this vulnerability in order to manipulate the sql query performed. As a result he can extract sensitive data from the web server and in some cases he can use this vulnerability in order to get a remote code execution on the remote web server.
CVE-2021-42663 1 Online Event Booking And Reservation System Project 1 Online Event Booking And Reservation System 2024-11-21 4.3 Medium
An HTML injection vulnerability exists in Sourcecodester Online Event Booking and Reservation System in PHP/MySQL via the msg parameter to /event-management/index.php. An attacker can leverage this vulnerability in order to change the visibility of the website. Once the target user clicks on a given link he will display the content of the HTML code of the attacker's choice.
CVE-2021-42662 1 Online Event Booking And Reservation System Project 1 Online Event Booking And Reservation System 2024-11-21 5.4 Medium
A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Online Event Booking and Reservation System in PHP/MySQL via the Holiday reason parameter. An attacker can leverage this vulnerability in order to run javascript commands on the web server surfers behalf, which can lead to cookie stealing and more.