Skip to content

Issues: FantasticLBP/Hotels_Server

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

16 Open 0 Closed
16 Open 0 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

Hotels_Server Password disclosure
#16 opened Mar 31, 2022 by whl90
Hotels_Server Unauthorized Access Vulnerability
#15 opened Mar 31, 2022 by whl90
During 2021-05-20, Hotels_Server can perform SQL injection through the username parameter.
#14 opened May 20, 2021 by Juneah
SQL Injection Vulnerability in /controller/api/Room.php
#13 opened Oct 31, 2019 by sususukkk
SQL Injection Vulnerability in /controller/api/RevokeOrder.php
#12 opened Oct 31, 2019 by sususukkk
SQL INJECT in url /controller/api/RandomHotel.php
#11 opened Oct 31, 2019 by sususukkk
SQL Injection Vulnerability in /controller/api/orderList.php
#10 opened Oct 31, 2019 by sususukkk
SQL Injection Vulnerability in /controller/api/Order.php
#9 opened Oct 31, 2019 by sususukkk
SQL Injection parameter 'subjectId' is vulnerable
#8 opened Oct 31, 2019 by sususukkk
language
#7 opened Mar 26, 2019 by shawnso151
SQL Injection parameter 'password' is vulnerable
#6 opened Mar 10, 2019 by BurpsuitPro
XSS vulnerability in /api/login.php?parameter
#5 opened Mar 7, 2019 by BurpsuitPro
Hotels_Server through 2018-11-05 has SQL Injection via the API.
#4 opened Feb 17, 2019 by ghost
1
XSS Vulnerability in /view/hotelList.php
#3 opened Jan 23, 2019 by Anion3r
Using of BASE64 Encoding for storage of password and retrieval of password
#2 opened Jan 20, 2019 by LennonCMJ
SQL Injection Vulnerability in controller/fetchpwd.php
#1 opened Jan 19, 2019 by TomAPU
ProTip! Adding no:label will show everything without a label.