Online Lot Reservation System vulnerabilities

A vulnerability was identified in code-projects Online Lot Reservation System 1.0 affecting an unknown function of /edithousepic.php. Manipulation of the image argument leads to unrestricted upload. The attack can be launched remotely and the exploit is publicly available.

A vulnerability was determined in code-projects Online Lot Reservation System 1.0 affecting an unknown function of /activity.php. Manipulation of the directory argument causes unrestricted upload. The attack can be initiated remotely and the exploit has been publicly disclosed.

A vulnerability was found in code-projects Online Lot Reservation System up to 1.0. The readfile function in /download.php allows path traversal via manipulation of the File argument. The attack can be initiated remotely and the exploit has been made public.