Online Event Booking And Reservation System

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2021-42667 CRITICAL POC THREAT Act Now

A SQL Injection vulnerability exists in Sourcecodester Online Event Booking and Reservation System in PHP in event-management/views. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

SQLi PHP Information Disclosure RCE Online Event Booking And Reservation System

NVD GitHub

CVSS 3.1

9.8

EPSS

15.8%

CVE-2021-42663 MEDIUM POC This Month

An HTML injection vulnerability exists in Sourcecodester Online Event Booking and Reservation System in PHP/MySQL via the msg parameter to /event-management/index.php. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Online Event Booking And Reservation System

NVD GitHub

CVSS 3.1

4.3

EPSS

3.8%

CVE-2021-42662 MEDIUM POC This Month

A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Online Event Booking and Reservation System in PHP/MySQL via the Holiday reason parameter. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Online Event Booking And Reservation System

NVD GitHub Exploit-DB

CVSS 3.1

5.4

EPSS

1.6%

CVE-2021-42667

EPSS 16% CVSS 9.8

CRITICAL POC THREAT Act Now

SQLi PHP Information Disclosure +2

NVD GitHub

CVE-2021-42663

EPSS 4% CVSS 4.3

MEDIUM POC This Month

PHP XSS Online Event Booking And Reservation System

NVD GitHub

CVE-2021-42662

EPSS 2% CVSS 5.4

MEDIUM POC This Month

PHP XSS Online Event Booking And Reservation System

NVD GitHub Exploit-DB