Lucene search
+L

2236 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 8:59 a.m.15 views

CVE-2023-50841

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Repute Infosystems BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin.This issue affects BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin...

8.8CVSS8.8AI score0.00537EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 8:59 a.m.14 views

CVE-2023-50851

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in N Squared Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin.This issue affects Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin: from n/a before...

7.6CVSS7.8AI score0.00534EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 8:48 a.m.12 views

CVE-2025-23672

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in tenteeglobal Instant Appointment instant-appointment allows Reflected XSS.This issue affects Instant Appointment: from n/a through = 1.2...

7.1CVSS7.2AI score0.0037EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/06 4:15 a.m.8 views

CVE-2025-11723

The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.6.9.5 via the hash function due to use of a hardcoded fall-back salt. This makes it possible for...

6.5CVSS0.00194EPSS
SaveExploits0References2
CVE
CVE
added 2026/01/06 3:21 a.m.27 views

CVE-2025-11723

CVE-2025-11723 : Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin for WordPress is affected up to version 1.6.9.5. The vulnerability arises from a hardcoded fallback salt used in the hash() function, enabling unauthenticated attackers to generate a valid token across sit...

6.5CVSS5.5AI score0.00194EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/01/06 12:00 a.m.9 views

WordPress plugin Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin 安全特征问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. WordPress plugin...

6.5CVSS6.4AI score0.00194EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/01/06 12:00 a.m.11 views

WordPress plugin Appointment Booking and Scheduling Calendar Plugin – WP Timetics 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. WordPress plugin...

6.5CVSS6.3AI score0.00218EPSS
SaveExploits0References3
CNVD
CNVD
added 2025/12/25 12:00 a.m.13 views

Online Appointment Booking System deletemanager.php File SQL Injection Vulnerability

Online Appointment Booking System is an online appointment booking system. Online Appointment Booking System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter managername in the file /admin/deletemanager.ph...

7.2CVSS8.3AI score0.00313EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/12/25 12:00 a.m.11 views

Complete Online Beauty Parlor Management System /view-appointment.php File SQL Injection Vulnerability

Complete Online Beauty Parlor Management System is an online beauty parlor management system. The Complete Online Beauty Parlor Management System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally entered SQL statement in the parameter viewid i...

9.8CVSS6.1AI score0.00371EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/12/25 12:00 a.m.6 views

WordPress Plugin Appointment Booking Calendar Information Disclosure Vulnerability

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. An information disclosure vulnerability exists in the WordPress plugin Appointment Booking...

5.3CVSS5.9AI score0.00353EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/12/25 12:00 a.m.11 views

Online Appointment Booking System clinic parameter SQL injection vulnerability

Online Appointment Booking System is an online appointment booking system. Online Appointment Booking System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter clinic in the file...

9.8CVSS8.3AI score0.00355EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/12/22 3:23 a.m.7 views

CVE-2025-14990

A security flaw has been discovered in Campcodes Complete Online Beauty Parlor Management System 1.0. Impacted is an unknown function of the file /admin/view-appointment.php. Performing a manipulation of the argument viewid results in sql injection. The attack may be initiated remotely. The explo...

9.8CVSS7.2AI score0.00371EPSS
SaveExploits1References1
OSV
OSV
added 2025/12/21 4:16 a.m.8 views

CVE-2025-14990

A security flaw has been discovered in Campcodes Complete Online Beauty Parlor Management System 1.0. Impacted is an unknown function of the file /admin/view-appointment.php. Performing a manipulation of the argument viewid results in sql injection. The attack may be initiated remotely. The explo...

9.8CVSS5.8AI score0.00371EPSS
SaveExploits1References5
NVD
NVD
added 2025/12/21 4:16 a.m.8 views

CVE-2025-14990

A security flaw has been discovered in Campcodes Complete Online Beauty Parlor Management System 1.0. Impacted is an unknown function of the file /admin/view-appointment.php. Performing a manipulation of the argument viewid results in sql injection. The attack may be initiated remotely. The explo...

9.8CVSS0.00371EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/12/21 3:02 a.m.4 views

CVE-2025-14990 Campcodes Complete Online Beauty Parlor Management System view-appointment.php sql injection

A security flaw has been discovered in Campcodes Complete Online Beauty Parlor Management System 1.0. Impacted is an unknown function of the file /admin/view-appointment.php. Performing a manipulation of the argument viewid results in sql injection. The attack may be initiated remotely. The explo...

7.5CVSS7.2AI score0.00371EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/12/21 3:02 a.m.37 views

CVE-2025-14990 Campcodes Complete Online Beauty Parlor Management System view-appointment.php sql injection

A security flaw has been discovered in Campcodes Complete Online Beauty Parlor Management System 1.0. Impacted is an unknown function of the file /admin/view-appointment.php. Performing a manipulation of the argument viewid results in sql injection. The attack may be initiated remotely. The explo...

7.5CVSS0.00371EPSS
SaveExploits1References5
CVE
CVE
added 2025/12/21 3:02 a.m.32 views

CVE-2025-14990

The CVE-2025-14990 issue affects Campcodes Complete Online Beauty Parlor Management System 1.0. The vulnerability is an SQL injection in the file /admin/view-appointment.php, caused by manipulation of the viewid parameter in an unknown function. The attack can be performed remotely, and public ex...

9.8CVSS7.2AI score0.00371EPSS
SaveExploits1References5Affected Software1
CNNVD
CNNVD
added 2025/12/21 12:00 a.m.8 views

CampCodes Complete Online Beauty Parlor Management System SQL注入漏洞

Complete Online Beauty Parlor Management System is an online beauty parlor management system. The Complete Online Beauty Parlor Management System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally entered SQL statement in the parameter viewid i...

9.8CVSS7.2AI score0.00371EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2025/12/21 12:00 a.m.12 views

PT-2025-52577

Name of the Vulnerable Software and Affected Versions Campcodes Complete Online Beauty Parlor Management System version 1.0 Description A security flaw exists in Campcodes Complete Online Beauty Parlor Management System 1.0. The issue involves SQL injection, potentially allowing remote attackers ...

9.8CVSS6.7AI score0.00371EPSS
SaveExploits1References12
RedhatCVE
RedhatCVE
added 2025/12/20 4:17 a.m.17 views

CVE-2025-14939

A vulnerability was found in code-projects Online Appointment Booking System 1.0. Impacted is an unknown function of the file /admin/deletemanager.php. The manipulation of the argument managername results in sql injection. The attack may be performed from remote. The exploit has been made public...

7.2CVSS6.7AI score0.00313EPSS
SaveExploits1References1
Rows per page
Query Builder