CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 1CVE-2024-8219 – code-projects Responsive Hotel Site index.php sql injection
https://notcve.org/view.php?id=CVE-2024-8219
A vulnerability was found in code-projects Responsive Hotel Site 1.0. It has been classified as critical. Affected is an unknown function of the file index.php. The manipulation of the argument name/phone/email leads to sql injection. It is possible to launch the attack remotely. • https://code-projects.org https://github.com/t4rrega/cve/issues/8 https://vuldb.com/?ctiid.275928 https://vuldb.com/?id.275928 https://vuldb.com/?submit.398205 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 1CVE-2023-1498 – code-projects Responsive Hotel Site Newsletter Log messages.php sql injection
https://notcve.org/view.php?id=CVE-2023-1498
A vulnerability classified as critical has been found in code-projects Responsive Hotel Site 1.0. Affected is an unknown function of the file messages.php of the component Newsletter Log Handler. The manipulation of the argument title leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. • https://github.com/Decemberus/BugHub/blob/main/Responsive%20Hotel%20Site%20System%20Has%20Sql%20injection%20vulnerabilities.pdf https://vuldb.com/?ctiid.223398 https://vuldb.com/?id.223398 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •