CVSS: 4.8EPSS: 0%CPEs: 2EXPL: 0CVE-2024-27440
https://notcve.org/view.php?id=CVE-2024-27440
The Toyoko Inn official App for iOS versions prior to 1.13.0 and Toyoko Inn official App for Android versions prior 1.3.14 don't properly verify server certificates, which allows a man-in-the-middle attacker to spoof servers and obtain sensitive information via a crafted certificate. La aplicación oficial de Toyoko Inn para versiones de iOS anteriores a 1.13.0 y la aplicación oficial de Toyoko Inn para versiones de Android anteriores a 1.3.14 no verifican correctamente los certificados del servidor, lo que permite a un atacante intermediario falsificar servidores y obtener datos e información confidencial a través de un certificado elaborado. • https://apps.apple.com/jp/app/%E3%83%9B%E3%83%86%E3%83%AB%E6%9D%B1%E6%A8%AAinn-%E6%9D%B1%E6%A8%AA%E3%82%A4%E3%83%B3-%E5%85%AC%E5%BC%8F%E3%82%A2%E3%83%97%E3%83%AA/id1439388270 https://jvn.jp/en/jp/JVN52919306 https://play.google.com/store/apps/details?id=com.toyoko_inn.toyokoandroid • CWE-295: Improper Certificate Validation •
CVSS: 9.8EPSS: 1%CPEs: 1EXPL: 1CVE-2021-41662
https://notcve.org/view.php?id=CVE-2021-41662
The South Gate Inn Online Reservation System v1.0 contains an SQL injection vulnerability that can be chained with a malicious PHP file upload, which is caused by improper file handling in the editImg function. This vulnerability leads to remote code execution. South Gate Inn Online Reservation System versión v1.0, contiene una vulnerabilidad de inyección SQL que puede encadenarse con una carga de archivos PHP maliciosa, causada por un manejo inapropiado de archivos en la función editImg. Esta vulnerabilidad conlleva a una ejecución de código remota • https://github.com/janikwehrli1/0dayHunt/blob/main/SouthGateInn_RCE.py • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 1CVE-2021-41471
https://notcve.org/view.php?id=CVE-2021-41471
SQL injection vulnerability in Sourcecodester South Gate Inn Online Reservation System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the email and Password parameters. Una vulnerabilidad de inyección SQL en Sourcecodester South Gate Inn Online Reservation System versión v1 por oretnom23, permite a atacantes ejecutar comandos SQL arbitrarios por medio de los parámetros email y Password • https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/janobe/CVE-nu11-12-09162021 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 5.4EPSS: 0%CPEs: 1EXPL: 0CVE-2014-7012
https://notcve.org/view.php?id=CVE-2014-7012
The Coffee Inn (aka lt.lemonlabs.android.coffeeinn) application 2.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. La aplicación para Android Cofee Inn (también conocida como lt.lemonlabs.android.coffeeinn) 2.0.1 no verifica los certificados X.509 de los servidores SSL, lo que permite a atacantes man-in-the-middle suplantar servidores y obtener información sensible a través de un certificado manipulado. • http://www.kb.cert.org/vuls/id/366545 http://www.kb.cert.org/vuls/id/582497 https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing • CWE-310: Cryptographic Issues •
CVSS: 7.2EPSS: 0%CPEs: 1EXPL: 1CVE-2002-0526
https://notcve.org/view.php?id=CVE-2002-0526
Vulnerability in (1) inews or (2) rnews for INN 2.2.3 and earlier, related to insecure open() calls. Vulnerabilidad en inews o rnews en INN 2.2.3 y anteriores, relacionada con llamadas poco seguras a open(). • http://archives.neohapsis.com/archives/bugtraq/2002-04/0140.html https://exchange.xforce.ibmcloud.com/vulnerabilities/42803 •