← Back

Seat Reservation System

seat_reservation_system

Vendor: Seat Reservation System Project • 3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-36002
1Seat Reservation System Project
1Seat Reservation System
Jun 17, 2026
Feb 17, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Seat-Reservation-System 1.0 has a SQL injection vulnerability in index.php in the id parameter where attackers can obtain sensitive database information.
CVE-2020-25763
1Seat Reservation System Project
1Seat Reservation System
Jun 17, 2026
Sep 30, 2020
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Seat Reservation System version 1.0 suffers from an Unauthenticated File Upload Vulnerability allowing Remote Attackers to gain Remote Code Execution (RCE) on the Hosting Webserver via uploading PHP files.
CVE-2020-25762
1Seat Reservation System Project
1Seat Reservation System
Jun 17, 2026
Sep 30, 2020
N/A· v4
9.1 CRITICAL· v3
6.4 MEDIUM· v2
An issue was discovered in SourceCodester Seat Reservation System 1.0. The file admin_class.php does not perform input validation on the username and password parameters. An attacker can send malicious input in the post...Show more
An issue was discovered in SourceCodester Seat Reservation System 1.0. The file admin_class.php does not perform input validation on the username and password parameters. An attacker can send malicious input in the post request to /admin/ajax.php?action=login and bypass authentication, extract sensitive information etc.Show less