CVE-2018-10363: Improper Input Validation

An issue was discovered in the WpDevArt "Booking calendar, Appointment Booking System" plugin 2.2.2 for WordPress. Multiple parameters allow remote attackers to manipulate the values to change data such as prices...

OX App Suite 7.8.4 XSS / Privilege Management / SSRF / Traversal

Dear subscribers, we've migrated our public disclosure workflow to full-disclosure and are catching up on publishing recent vulnerabilities through this channel. Feel free to join our bug bounty programs open-xchange, dovecot, powerdns at HackerOne. Yours sincerely, Martin Heiland, Open-Xchange...

WordPress Doctor Appointment Booking 1.0.0 SQL Injection / XSS

Exploit Title: Wordpress Doctor Appointment Booking Plugin v1.0.0 - SQL Injection / XSS Date: 2018-01-01 Exploit Author: 8bitsec Vendor Homepage: https://codecanyon.net/ Software Link: https://codecanyon.net/item/doctor-appointment-booking-wordpress-plugin/21215314 Version: 1.0.0 Tested on: Kali...

January 22, 2017 – Morning Cyber Coffee Headlines – “NFL” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! January 22, 2018 - Headlines Carbon Black in the News: Strategic Cyber Ventures...

Easy!Appointments 1.2.1 - Cross-Site Scripting

Easy!Appointments 1.2.1 - Cross-Site Scripting Easy!Appointments v1.2.1 Multiple Stored XSS Vulnerabilities Vendor: Alex Tselegidis Product web page: http://www.easyappointments.org Affected version: 1.2.1 Summary: Easy!Appointments is a highly customizable web application that allows your...

ICDoctor Appointment 1.3 - 'key' SQL Injection

Exploit Title: Doctor Appointment Script 1.3 - SQL Injection Dork: N/A Date: 13.09.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Link: http://www.icloudcenter.com/doctor-appointment-script.htm Demo: http://icloudcenter.net/demos/icdoctorappointment/ Version: 1.3 Category: Webapps...

PHP Appointment Booking Script - Authentication Bypass Vulnerability

Exploit for php platform in category web applications ======================================================== Description : an attacker is able to inject malicious sql query to bypass the login page and login as admin Proof of Concept : - http://localhost/appointment/adminlogin.php set username...

PHP Appointment Booking Script - Authentication Bypass

PHP Appointment Booking Script - Authentication Bypass ======================================================== Description : an attacker is able to inject malicious sql query to bypass the login page and login as admin Proof of Concept : - http://localhost/appointment/adminlogin.php set username...

PHP Appointment Booking Script - Authentication Bypass

======================================================== Description : an attacker is able to inject malicious sql query to bypass the login page and login as admin Proof of Concept : - http://localhost/appointment/adminlogin.php set username and password to admin' or 1=1 -- -...

Appointment, v1.1 ,SQL Injection

Appointment by Harmis Technology joomlaextensions.co.in, v1.1, SQL Injection...

Joomla Appointment 1.1 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component Appointment v1.1 - SQL Injection Dork: N/A Date: 18.08.2017 Vendor Homepage: https://www.joomlaextensions.co.in/ Software Link: https://extensions.joomla.org/extensions/extension/appointment/ Demo:...

Joomla Appointment 1.1 SQL Injection

Exploit Title: Joomla! Component Appointment v1.1 - SQL Injection Dork: N/A Date: 18.08.2017 Vendor Homepage: https://www.joomlaextensions.co.in/ Software Link: https://extensions.joomla.org/extensions/extension/appointment/ Demo: http://joomlaextension.biz/appointment/ Version: 1.1 Category:...

Joomla! Component Appointment 1.1 - SQL Injection

Exploit Title: Joomla! Component Appointment v1.1 - SQL Injection Dork: N/A Date: 18.08.2017 Vendor Homepage: https://www.joomlaextensions.co.in/ Software Link: https://extensions.joomla.org/extensions/extension/appointment/ Demo: http://joomlaextension.biz/appointment/ Version: 1.1 Category:...

U.S. Dept Of Defense: Insecure Direct Object Reference on in-scope .mil website

Summary: A web form in a .mil website doesn't implement restriction against multiple failed attempts to place an ID in order to obtain users information or cancel an ongoing process. Description: Websites https://█████████/appointment/lookup.aspx?a=f and...

PT-2019-11413

Name of the Vulnerable Software and Affected Versions: Open Ticket Request System OTRS versions 7.x through 7.0.6 Open Ticket Request System OTRS Community Edition versions 6.0.x through 6.0.17 OTRSAppointmentCalendar versions 5.0.x through 5.0.12 Description: An issue was discovered that allows ...

CVE-2016-1216

Cross-site scripting XSS vulnerability in the "New appointment" function in Cybozu Garoon before 4.2.2...

Cross site scripting

Cross-site scripting XSS vulnerability in the "New appointment" function in Cybozu Garoon before 4.2.2...

CVE-2016-1216

Cross-site scripting XSS vulnerability in the "New appointment" function in Cybozu Garoon before 4.2.2...

CVE-2016-1216: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the "New appointment" function in Cybozu Garoon before 4.2.2...

PT-2017-7941

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions prior to 4.2.2 Description A cross-site scripting XSS issue exists in the "New appointment" function. This allows for potential malicious script execution. Recommendations For versions prior to 4.2.2, update to version...