Approved changes feed: RSS · Atom

cpe:2.3:a:janobe:online_hotel_reservation_system:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorJanobe (958e97e2-37fb-58eb-baa2-792f3e424acf)
ProductOnline Hotel Reservation System (a92a9c11-419d-5f7a-921e-eae60aac78e1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-10413 vulnerable 2026-06-03 14:54:11.646292 SourceCodester Online Hotel Reservation System update.php upload unrestricted upload
MEDIUM (6.3)
A vulnerability, which was classified as critical, has been found in SourceCodester Online Hotel Reservation System 1.0. Affected by this issue is the function upload of the file /guest/update.php. The manipulation of the argument image leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-10-27T09:31:04.379Z
Updated: 2024-10-28T17:15:30.257Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10411 vulnerable 2026-06-03 14:54:11.640667 SourceCodester Online Hotel Reservation System controller.php doCheckout sql injection
MEDIUM (6.3)
A vulnerability was found in SourceCodester Online Hotel Reservation System 1.0. It has been classified as critical. Affected is the function doCancelRoom/doCancel/doConfirm/doCancel/doCheckin/doCheckout of the file /marimar/admin/mod_room/controller.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-10-27T05:00:05.336Z
Updated: 2024-10-29T13:16:36.961Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10410 vulnerable 2026-06-03 14:54:11.640026 SourceCodester Online Hotel Reservation System controller.php upload unrestricted upload
MEDIUM (6.3)
A vulnerability classified as critical was found in SourceCodester Online Hotel Reservation System 1.0. Affected by this vulnerability is the function upload of the file /admin/mod_room/controller.php?action=add. The manipulation of the argument image leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-10-27T03:31:05.066Z
Updated: 2024-10-29T13:19:56.078Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.