PT-2022-20160 · Tinymce +1 · Tinymce +1

Name of the Vulnerable Software and Affected Versions: asith-eranga ISIC tour booking versions through the version published on Feb 13th 2018 Description: The issue allows attackers to upload arbitrary files via "/system/application/libs/js/tinymce/plugins/filemanager/dialog.php" and...

WordPress Plugin "Salon booking system" vulnerable to cross-site scripting

Overview WordPress Plugin "Salon booking system" contains a cross-site scripting vulnerability CWE-79. Gen Sato of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact An...

Salon Booking System < 7.9.4 - Reflected Cross-Site Scripting

The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting...

WordPress plugin Salon booking system 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

JVN#59663854: WordPress Plugin "Salon booking system" vulnerable to cross-site scripting

WordPress Plugin "Salon booking system" contains a cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the web browser of the user who is logging in to the WordPress administrative page where the product is installed. Solution Update the plugin Update the plug...

Vehicle Booking System File Upload Vulnerability

Vehicle Booking System is a vehicle booking system. A file upload vulnerability exists in Vehicle Booking System v1.0, which can be exploited by an attacker to execute arbitrary code via a specially crafted php file...

CVE-2022-43084

A cross-site scripting XSS vulnerability in admin-add-vehicle.php of Vehicle Booking System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the vname parameter...

CVE-2022-43084

A cross-site scripting XSS vulnerability in admin-add-vehicle.php of Vehicle Booking System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the vname parameter...

CVE-2022-43083

An arbitrary file upload vulnerability in admin-add-vehicle.php of Vehicle Booking System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...

PT-2022-26745 · Unknown · Vehicle Booking System

Name of the Vulnerable Software and Affected Versions: Vehicle Booking System version 1.0 Description: The issue allows attackers to execute arbitrary code via a crafted PHP file due to an arbitrary file upload vulnerability in the admin-add-vehicle.php file. Recommendations: For Vehicle Booking...

Vehicle Booking System 跨站脚本漏洞

Vehicle Booking System is a vehicle booking system by Martin Mbithi Nzilani personal developer. A security vulnerability exists in Vehicle Booking System v1.0, which originates from a cross-site scripting XSS vulnerability contained in admin-add-vehicle.php. An attacker can exploit this...

CVE-2022-43083

CVE-2022-43083 affects Vehicle Booking System v1.0 via an arbitrary file upload in admin-add-vehicle.php that allows code execution through a crafted PHP file. The base vulnerability is confirmed across multiple sources (NVD/Red Hat/CNVD/CVE list). CVSS v3.1 base score 7.2 (High): network attack ...

CVE-2022-43084

CVE-2022-43084 describes a cross-site scripting (XSS) vulnerability in Vehicle Booking System v1.0, specifically in the admin-add-vehicle.php page. The flaw arises from insufficient input sanitization of the v_name parameter, allowing an attacker to inject arbitrary web scripts or HTML via a craf...

CVE-2022-43083

An arbitrary file upload vulnerability in admin-add-vehicle.php of Vehicle Booking System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-43084

A cross-site scripting XSS vulnerability in admin-add-vehicle.php of Vehicle Booking System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the vname parameter...

CVE-2022-43083

An arbitrary file upload vulnerability in admin-add-vehicle.php of Vehicle Booking System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...

Vehicle Booking System 代码问题漏洞

Vehicle Booking System is a vehicle booking system. A file upload vulnerability exists in Vehicle Booking System v1.0, which can be exploited by an attacker to execute arbitrary code via a specially crafted php file...

CVE-2022-2692

A vulnerability, which was classified as problematic, was found in SourceCodester Wedding Hall Booking System. This affects an unknown part of the file /whbs/admin/?page=user of the component Staff User Profile. The manipulation of the argument First Name/Last Name leads to cross site scripting. ...

CVE-2022-2689

A vulnerability classified as problematic has been found in SourceCodester Wedding Hall Booking System. Affected is an unknown function of the file /whbs/?page=contactus of the component Contact Page. The manipulation of the argument Message leads to cross site scripting. It is possible to launch...

CVE-2022-2690

A vulnerability classified as problematic was found in SourceCodester Wedding Hall Booking System. Affected by this vulnerability is an unknown functionality of the file /whbs/?page=mybookings of the component Booking Form. The manipulation of the argument Remarks leads to cross site scripting. T...