Sbitsoft Vulnerabilities

An attacker can manipulate the 'promo_send' parameter in Eventobot's discount calculation feature to access, modify, or delete data in the database. This vulnerability can be exploited if the attacker can send requests to the affected PHP script, potentially leading to serious data breaches or loss.

An attacker can trick a user into clicking a malicious link that runs harmful JavaScript in their browser, potentially stealing sensitive information like session cookies or taking actions as if they were the user. This vulnerability occurs when the attacker manipulates the 'name' parameter in the search results page of Eventobot.