Approved changes feed: RSS · Atom

cpe:2.3:a:online_event_booking_and_reservation_system_project:online_event_booking_and_reservation_system:2.3.0:*:*:*:*:*:*:*

part: a version: 2.3.0 update: *

VendorOnline Event Booking And Reservation System Project (33bde867-1de9-5b38-a790-d750bf23b663)
ProductOnline Event Booking And Reservation System (09afc837-c3af-5c77-85c7-3b9580bdf1a2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-42667 vulnerable 2026-06-08 05:35:22.432432 Details available
A SQL Injection vulnerability exists in Sourcecodester Online Event Booking and Reservation System in PHP in event-management/views. An attacker can leverage this vulnerability in order to manipulate the sql query performed. As a result he can extract sensitive data from the web server and in some cases he can use this vulnerability in order to get a remote code execution on the remote web server.
Published: 2021-11-05T12:26:06.000Z
Updated: 2024-08-04T03:38:49.466Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-42663 vulnerable 2026-06-08 05:35:22.429559 Details available
An HTML injection vulnerability exists in Sourcecodester Online Event Booking and Reservation System in PHP/MySQL via the msg parameter to /event-management/index.php. An attacker can leverage this vulnerability in order to change the visibility of the website. Once the target user clicks on a given link he will display the content of the HTML code of the attacker's choice.
Published: 2021-11-05T12:17:30.000Z
Updated: 2024-08-04T03:38:49.500Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-42662 vulnerable 2026-06-08 05:35:22.429140 Details available
A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Online Event Booking and Reservation System in PHP/MySQL via the Holiday reason parameter. An attacker can leverage this vulnerability in order to run javascript commands on the web server surfers behalf, which can lead to cookie stealing and more.
Published: 2021-11-05T10:21:22.000Z
Updated: 2024-08-04T03:38:49.329Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.