Search Results (5 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-0575 2 Code-projects, Fabian 2 Online Product Reservation System, Online Product Reservation System 2026-04-18 7.3 High
A security vulnerability has been detected in code-projects Online Product Reservation System 1.0. This impacts an unknown function of the file /handgunner-administrator/adminlogin.php of the component Administrator Login. Such manipulation of the argument emailadd/pass leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used.
CVE-2026-0576 2 Code-projects, Fabian 2 Online Product Reservation System, Online Product Reservation System 2026-04-18 7.3 High
A vulnerability was detected in code-projects Online Product Reservation System 1.0. Affected is an unknown function of the file /handgunner-administrator/prod.php of the component Parameter Handler. Performing a manipulation of the argument cat/price/name/model/serial results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and may be used.
CVE-2026-0577 2 Code-projects, Fabian 2 Online Product Reservation System, Online Product Reservation System 2026-04-18 6.3 Medium
A flaw has been found in code-projects Online Product Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file /handgunner-administrator/prod.php. Executing a manipulation can lead to unrestricted upload. It is possible to launch the attack remotely. The exploit has been published and may be used.
CVE-2026-0579 2 Code-projects, Fabian 2 Online Product Reservation System, Online Product Reservation System 2026-04-18 7.3 High
A vulnerability was found in code-projects Online Product Reservation System 1.0. This affects an unknown part of the file /handgunner-administrator/edit.php of the component POST Parameter Handler. The manipulation of the argument prod_id/name/price/model/serial results in sql injection. The attack can be launched remotely. The exploit has been made public and could be used.
CVE-2026-0578 2 Code-projects, Fabian 2 Online Product Reservation System, Online Product Reservation System 2026-04-18 7.3 High
A vulnerability has been found in code-projects Online Product Reservation System 1.0. Affected by this issue is some unknown functionality of the file /handgunner-administrator/delete.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.