Hotel booking system for customers added with an admin feature to manage reservations.
Hotel booking system for customers added with an admin feature to manage reservations.
CSRF + IDOR + POST XSS = Session Hijacking
Multiple Business Logic Errors
IDOR
Potential Hash Collision
Mass User Enumeration to Authentication Bypass
Lack of Rate Limiting Causes User Registration Spam
Unverified Password Change
hotel-mgmt-system has an improper authentication logic vulnerability
user-profile-update-feature has a stored XSS vulnerability