WordPress Booking Manager plugin server-side request forgery vulnerability

Linux Kernel Memory Misreference Vulnerability CNVD-2023-65164...

CVE-2023-1977

The Booking Manager WordPress plugin before 2.0.29 does not validate URLs input in it's admin panel or in shortcodes for showing events from a remote .ics file, allowing an attacker with privileges as low as Subscriber to perform SSRF attacks on the sites internal network...

CVE-2023-1977

The Booking Manager WordPress plugin before 2.0.29 does not validate URLs input in it's admin panel or in shortcodes for showing events from a remote .ics file, allowing an attacker with privileges as low as Subscriber to perform SSRF attacks on the sites internal network...

CVE-2023-1977

Affected software: WordPress Booking Manager plugin. Vulnerable in versions prior to 2.0.29 where the plugin does not validate URLs in the admin panel or shortcodes that fetch events from a remote ICS file. Root cause: inadequate URL validation enables Server-Side Request Forgery (SSRF), allowing...

CVE-2023-1977 Booking Manager < 2.0.29 - Subscriber+ SSRF

The Booking Manager WordPress plugin before 2.0.29 does not validate URLs input in it's admin panel or in shortcodes for showing events from a remote .ics file, allowing an attacker with privileges as low as Subscriber to perform SSRF attacks on the sites internal network...

WordPress Plugin Booking Manager 代码问题漏洞

Linux Kernel Memory Misreference Vulnerability CNVD-2023-65164...

PT-2023-17385 · WordPress · Booking Manager

Name of the Vulnerable Software and Affected Versions: The Booking Manager WordPress plugin versions prior to 2.0.29 Description: The issue concerns a lack of validation for URLs input in the admin panel or in shortcodes for showing events from a remote .ics file. This allows an attacker with...

CVE-2023-35048

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in MagePeople Team Booking and Rental Manager for Bike plugin = 1.2.1 versions...

WordPress Plugin Booking and Rental Manager 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

WordPress Booking Manager Plugin < 2.0.29 is vulnerable to Server Side Request Forgery (SSRF)

Software Booking Manager Type Plugin Vulnerable versions 2.0.29 Fixed in 2.0.29 OWASP Top 10 A5: Broken Access Control Classification Server Side Request Forgery SSRF CVE CVE-2023-1977 Patch priority High CVSS severity High 6.4 Developer Claim ownership PSID dc7cead73df5 Credits Shreya Pohekar...

Online Booking Manager Hotels Portal - SQLi Vulnerability

---- 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

CVE-2008-5194

SQL injection vulnerability in checkavail.php in SoftVisions Software Online Booking Manager obm 2.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in checkavail.php in SoftVisions Software Online Booking Manager obm 2.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-5194

The provided connected documents confirm a concrete vulnerability: SQL injection in SoftVisions Software Online Booking Manager (obm) 2.2, exploitable through the id parameter in checkavail.php. This allows remote attackers to execute arbitrary SQL commands. The issue is documented across CVE-200...

Online Booking Manager 'checkavail.php' SQL注入漏洞

BUGTRAQ ID: 30004 CNCAN ID：CNCAN-2008070101 Online Booking Manager是一款基于PHP的WEB应用程序。 Online Booking Manager不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可能获得敏感信息或操作数据库。 问题是'checkavail.php'脚本对用户提交给'id'参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 SoftVisions Software Online Booking Manager 2.2 目前没有详细解决方案提供：...

Online Booking Manager 2.2 (id) SQL Injection Vulnerability

No description provided by source. Online Booking Manager2.2 id= SQL Injection Vulnerability Author: Hussin X Home : www.tryag.cc/cc email: darkangelg85atYahooDoTcom hussin.xathotmailDoTcom IRAQI HomE script : http://www.onlinebookingmanager.com demo :...

Online Booking Manager 2.2 (id) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =========================================================== Online Booking Manager 2.2 id SQL Injection Vulnerability =========================================================== Online Booking Manager2.2 id= SQL Injection Vulnerability...

Online Booking Manager 2.2 - id SQL Injection

Online Booking Manager 2.2 - id SQL Injection Online Booking Manager2.2 id= SQL Injection Vulnerability Author: Hussin X Home : www.tryag.cc/cc email: darkangelg85atYahooDoTcom hussin.xathotmailDoTcom IRAQI HomE script : http://www.onlinebookingmanager.com demo :...