CVE-2020-36002

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Seat-Reservation-System 1.0 has a SQL injection vulnerability in index.php in the id parameter where attackers can obtain sensitive database information.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://github.com/BigTiger2020/Seat-Reservation-SystemExploit, Third Party Advisory
https://www.sourcecodester.com/php/14452/seat-reservation-system-movie-theater-project-using-phpmysql.htmBroken Link
https://www.sourcecodester.com/sites/default/files/download/oretnom23/seat-reservation-system-using-php_0.zipProduct, Third Party Advisory
https://github.com/BigTiger2020/Seat-Reservation-SystemExploit, Third Party Advisory
https://www.sourcecodester.com/php/14452/seat-reservation-system-movie-theater-project-using-phpmysql.htmBroken Link
https://www.sourcecodester.com/sites/default/files/download/oretnom23/seat-reservation-system-using-php_0.zipProduct, Third Party Advisory

Timeline

Published: Feb 17, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-360037.5The id parameter in detail.php of Online Book Store v1.0 is vulnerable to union-based blind SQL injection, which leads to the ability to ret CVE-2020-360046.5AppCMS 2.0.101 in /admin/download_frame.php has a SQL injection vulnerability which allows attackers to obtain sensitive database informatio CVE-2020-360056.5AppCMS 2.0.101 in /admin/app.php has an arbitrary file deletion vulnerability which allows attackers to delete arbitrary files on the site.CVE-2020-360066.5AppCMS 2.0.101 in /admin/info.php has an arbitrary file deletion vulnerability which allows attackers to delete arbitrary files on the site.CVE-2020-360076.1AppCMS 2.0.101 in /admin/template/tpl_app.php has a cross site scripting attack vulnerability which allows the attacker to obtain sensitive CVE-2020-360088.1OBottle 2.0 in \c\t.php contains an arbitrary file write vulnerability.CVE-2020-360097.5OBottle 2.0 in \c\g.php contains an arbitrary file download vulnerability.CVE-2020-36016.7A vulnerability in the CLI of Cisco StarOS operating system for Cisco ASR 5000 Series Routers could allow an authenticated, local attacker t CVE-2020-360114.8A cross-site scripting (XSS) issue in Add Patient Form in QDOCS Smart Hospital Management System 3.1 allows a remote attacker to inject arbi CVE-2020-360124.8Stored XSS vulnerability in BDTASK Multi-Store Inventory Management System 1.0 allows a local admin to inject arbitrary code via the Custome CVE-2020-36026.7A vulnerability in the CLI of Cisco StarOS operating system for Cisco ASR 5000 Series Routers could allow an authenticated, local attacker t CVE-2020-360236.5An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial of service (DoS) via crafted .pdf