Anubhav106

**Name of the Vulnerable Software and Affected Versions** code-projects Simple Inventory System version 1.0 **Description** An issue exists in the `/InventoryManagement/edit.php` endpoint where the manipulation of the `ID` argument allows for SQL injection. This allows a remote attacker to interfere with the database queries executed by the application. **Recommendations** Update code-projects Simple Inventory System version 1.0 to a version that contains a fix for this issue. As a temporary mitigation, restrict access to the `/InventoryManagement/edit.php` file.

**Name of the Vulnerable Software and Affected Versions** code-projects Login Registration System version 1.0 **Description** A weakness in the SQL Database Backup Handler component allows remote attackers to access files or directories. This issue resides within an unknown function of the `/loginsystem/database/login registration system.sql` file. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** code-projects Simple Inventory System version 1.0 **Description** A remote SQL injection exists in the `/delete.php` endpoint. This issue occurs when the `ID` argument is manipulated, allowing an attacker to execute arbitrary SQL commands on the database. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the `/delete.php` endpoint to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** code-projects Hotel and Tourism Reservation version 1.0 **Description** An issue exists in the Tour Management Page component within the '/admin/add tour.php' endpoint. Remote attackers can perform a SQL injection by manipulating the `delete image` argument. SQL injection is a technique where malicious SQL statements are inserted into entry fields for execution, potentially allowing unauthorized access to the database. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the '/admin/add tour.php' endpoint or avoid using the `delete image` argument.

**Name of the Vulnerable Software and Affected Versions** code-projects Hotel and Tourism Reservation version 1.0 **Description** An issue exists in the Room Management Page component within the file `/admin/rooms.php`. A remote attacker can perform a SQL injection—a technique used to manipulate a database by inserting malicious SQL code into a query—by manipulating the `delete` argument. **Recommendations** Restrict access to the file `/admin/rooms.php` to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** code-projects Smart Parking System version 1.0 **Description** An issue exists in the `/parkings/parkings.php` file where improper handling of the `street`, `city`, and `status` arguments allows for remote SQL injection. SQL injection is a technique where an attacker inserts malicious SQL code into a query, potentially allowing them to manipulate the database. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. Restrict access to the `/parkings/parkings.php` file to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** code-projects Hotel and Tourism Reservation version 1.0 **Description** An issue exists in the Event Management Page component within the file `/admin/add event.php`. Remote manipulation of the `fdetails` argument allows for SQL injection, a technique where malicious SQL statements are inserted into entry fields for execution. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. Avoid using the `fdetails` argument in the `/admin/add event.php` file to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** code-projects Hotel and Tourism Reservation version 1.0 **Description** A flaw in the Tour Reservations Page component allows for remote SQL injection. This occurs when the `tour` argument is manipulated within the `/admin/tour reserves.php` endpoint. SQL injection is a technique where malicious SQL statements are inserted into entry fields for execution, potentially allowing unauthorized access to the database. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. Avoid using the `tour` argument in the `/admin/tour reserves.php` endpoint until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** code-projects Hotel and Tourism Reservation version 1.0 **Description** A remote SQL injection flaw exists in the `/admin/add room.php` endpoint. The issue occurs when manipulating the `delete image`, `edit`, `description`, `number`, `price`, `rooms`, or `type` variables. SQL injection is a technique where an attacker inserts malicious SQL code into a query, allowing them to interfere with the database. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Hotel and Tourism Reservation version 1.0 **Description** An issue exists in the Reservations Management Page within the file `/admin/reservations.php`. A remote attacker can perform a SQL injection, which is a technique used to manipulate a database by inserting malicious SQL code into a query, by manipulating the `delete` argument. **Recommendations** Update Hotel and Tourism Reservation version 1.0 to a patched version. As a temporary mitigation, restrict access to the `/admin/reservations.php` endpoint or avoid using the `delete` argument until the patch is applied.