Janobe vulnerabilities
We track 24 vulnerabilities in Janobe products across 17 products. 24 are rated high or critical, and none are known to be exploited. The most recent was published on March 9, 2026.
Latest Janobe vulnerabilities
- 8.8 High severity
Resort Reservation System: Improper Neutralization of Special Elements used in an SQL Command
A weakness has been identified in SourceCodester/janobe Resort Reservation System 1.0. This issue affects some unknown processing of the file /room_rates.php. This manipulation of the argument q causes sql injection. The attack can be initiated remotely. The e
- 8.8 High severity
Resort Reservation System: Unrestricted Upload of File with Dangerous Type
A vulnerability has been found in SourceCodester/janobe Resort Reservation System 1.0. Affected is the function doInsert of the file /controller.php?action=add. Such manipulation of the argument image leads to unrestricted upload. The attack can be executed re
- 8.8 High severity
Resort Reservation System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in SourceCodester/janobe Resort Reservation System 1.0. This vulnerability affects unknown code of the file /accomodation.php. Such manipulation of the argument q leads to sql injection. The attack may be performed from remote. T
- 7.2 High severity
Vehicle Management System: Improper Neutralization of Special Elements used in an SQL Command
Vehicle Management System 1.0 is vulnerable to SQL Injection. A guest user can exploit vulnerable POST parameters in various administrative actions, such as booking a vehicle or confirming a booking. The affected parameters include "Booking ID", "Action Name",
- 9.8 Critical severity
School Attendance Monitoring System: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following
- 7.5 High severity
School Attendance Monitoring System: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following
- 7.5 High severity
School Attendance Monitoring System: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following
- 7.5 High severity
School Attendance Monitoring System: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following
- 7.5 High severity
School Attendance Monitoring System: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following
- 7.5 High severity
School Attendance Monitoring System: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following
- 7.5 High severity
School Attendance Monitoring System: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following
- 7.5 High severity
School Attendance Monitoring System: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following
- 7.5 High severity
Janobe PayPal: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following
- 7.5 High severity
Janobe PayPal: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following
- 7.5 High severity
Janobe PayPal: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following
- 7.5 High severity
Janobe PayPal: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following
- 7.5 High severity
Janobe PayPal: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following
- 7.5 High severity
Janobe PayPal: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following
- 9.8 Critical severity
Janobe PayPal: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following
- 7.5 High severity
Janobe PayPal: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following
- 7.5 High severity
E-Negosyo System: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in E-Negosyo System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in 'phonenumber' in '/passwordrecover.php' parameter.
- 7.5 High severity
E-Negosyo System: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in E-Negosyo System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in 'id' in '/admin/orders/controller.php' parameter
- 7.2 High severity
Interview Management System: Improper Neutralization of Special Elements used in an SQL Command
Interview Management System v1.0 was discovered to contain a SQL injection vulnerability via the component /interview/delete.php?action=deletecand&id=.
- 7.2 High severity
Interview Management System: Improper Neutralization of Special Elements used in an SQL Command
Interview Management System v1.0 was discovered to contain a SQL injection vulnerability via the component /interview/delete.php?action=questiondelete&id=.