CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2024-6113 – itsourcecode Monbela Tourist Inn Online Reservation System login.php sql injection
https://notcve.org/view.php?id=CVE-2024-6113
A vulnerability was found in itsourcecode Monbela Tourist Inn Online Reservation System 1.0. It has been rated as critical. This issue affects some unknown processing of the file login.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. • https://github.com/wangyuan-ui/CVE/issues/3 https://vuldb.com/?ctiid.268865 https://vuldb.com/?id.268865 https://vuldb.com/?submit.358991 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 1CVE-2024-6114 – itsourcecode Monbela Tourist Inn Online Reservation System controller.php unrestricted upload
https://notcve.org/view.php?id=CVE-2024-6114
A vulnerability classified as critical has been found in itsourcecode Monbela Tourist Inn Online Reservation System up to 1.0. Affected is an unknown function of the file controller.php. The manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. • https://github.com/wangyuan-ui/CVE/issues/4 https://vuldb.com/?ctiid.268866 https://vuldb.com/?id.268866 https://vuldb.com/?submit.358995 • CWE-434: Unrestricted Upload of File with Dangerous Type •