2047 matches found
Pinpoint Booking System <= 2.0 - Authenticated Blind SQL Injection
The Pinpoint Booking System – 1 WordPress Booking Plugin WordPress plugin was affected by an Authenticated Blind SQL Injection security vulnerability...
WordPress Booking System Plugin <= 2.0 - Blind SQL Injection
Because of this vulnerability, remote authenticated users can execute arbitrary SQL commands via "language" parameter. Solution Update the plugin...
iCAM Workstation Control 4.8.0.0 - Authentication Bypass
No description provided by source. Exploit Title: iCAM Workstation Control Software Local Authentication Bypass Google Dork: Vendor: Insight Media Internet Limited is based in the North West of England, and has 10 years experience in developing both internet and software solutions. Our staff are...
BSI Advance Hotel Booking System 1.0 - SQL Injection Vulnerability
No description provided by source. ----------------------------------------------------------------------- PHP BSI Advance Hotel Booking System v1.0 SQL Injection Vulnerability ----------------------------------------------------------------------- Author : v3n0m Site :...
BSI Hotel Booking System Admin 1.4 & 2.0 - Login Bypass Vulnerability
No description provided by source. ----------------------------------------------------------------------------------------- ECHOADV113$2010 BSI Hotel Booking System Admin Login Bypass Vulnerability ----------------------------------------------------------------------------------------- Author :...
Meeting Room Booking System (MRBS) 1.2.6 week.php area Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/30531/info MRBS Meeting Room Booking Software is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary...
Booking System Pro CSRF Vulnerability
No description provided by source. Exploit Title: Booking System Pro CSRF Vulnerability Date: 28/08/2012 Author: DaOne @LibyanCA Vendor: http://www.neptunescripts.com/products Price: $39 CSRF Add Admin html body onload=document.form0.submit; form method=POST name=form0...
Joomla Hotel Booking System - XSS/SQL Injection Multiple Vulnerabilities
No description provided by source. \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV111$2009 ----------------------------------------------------------------------------------------- ECHOADV111$2009 Joomla Hotel Booking System Component XSS/SQL Injection...
PHPJabbers Hotel Booking System 3.0 - Multiple Vulnerabilities
No description provided by source. Hotel Booking System V3.0 - Multiple Vulnerabilties ==================================================================== .:. Author : HackXBack .:. Contact : [email protected] .:. Home : http://www.iphobos.com/blog/ .:. Script :...
CBHotel Hotel Software and Booking system 1.8 - Multiple Vulnerabilities
No description provided by source. Exploit Title: Hotel Software and Booking system 1.8 - SQL Injection / Cross Site Scripting Date: 21 de Agosto del 2013 Exploit Author: Dylan Irzi Credit goes for: websecuritydev.com Vendor Homepage: http://www.cbhotel.eu/ Tested on: Win8 & Linux Mint Affected...
Wordpress Booking System (Booking Calendar) plugin SQL Injection
Exploit Title: Wordpress Booking System Booking Calendar plugin SQL Injection Release Date: 2014-05-21 Author: maodun Contact: Twitter: @conmancm Software Link: http://wordpress.org/support/plugin/booking-system Affected version: 1.3 Google Dork: inurl:/wp-content/plugins/booking-system/...
CVE-2014-4035
Cross-site scripting XSS vulnerability in bookingdetails.php in Best Soft Inc. BSI Advance Hotel Booking System 2.0 allows remote attackers to inject arbitrary web script or HTML via the title parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in bookingdetails.php in Best Soft Inc. BSI Advance Hotel Booking System 2.0 allows remote attackers to inject arbitrary web script or HTML via the title parameter...
CVE-2014-4035
CVE-2014-4035 affects Best Soft Inc. (BSI) Advance Hotel Booking System 2.0. The vulnerability is a cross-site scripting (XSS) in booking_details.php where the attacker can inject arbitrary script via the title parameter. Public materials (exploits and writeups) indicate a persistent XSS variant ...
BSI Advance Hotel Booking System 2.0 Cross Site Scripting
Exploit Title:BSI Advance Hotel Booking System Persistent XSS Google Dork: intext:Hotel Booking System v2.0 © 2008 - 2012 Copyright Best Soft Inc Date: Wed Jun 4 2014 Exploit Author: Angelo Ruwantha Vendor Homepage: http://www.bestsoftinc.com Software Link:...
Sql injection
SQL injection vulnerability in dopbs-backend-forms.php in the Booking System Booking Calendar plugin before 1.3 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the bookingformid parameter to wp-admin/admin-ajax.php...
CVE-2014-3210
CVE-2014-3210 describes an SQL injection in the WordPress Booking System (Booking Calendar) plugin. The vulnerability affects the plugin’s dopbs-backend-forms.php and allows remote authenticated users to execute arbitrary SQL commands via the booking_form_id parameter sent to wp-admin/admin-ajax....
CVE-2014-3210
SQL injection vulnerability in dopbs-backend-forms.php in the Booking System Booking Calendar plugin before 1.3 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the bookingformid parameter to wp-admin/admin-ajax.php...
WordPress Booking System SQL Injection
Exploit Title: Wordpress Booking System Booking Calendar plugin SQL Injection Release Date: 2014-05-21 Author: maodun Contact: Twitter: @conmancm Software Link: http://wordpress.org/support/plugin/booking-system Affected version:...
WordPress Plugin Booking System (Booking Calendar) - 'booking_form_id' SQL Injection
source: https://www.securityfocus.com/bid/67535/info Search Everything plugin for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue could allow an attacker to compromise the application, access or modify data,...