PT-2022-19949

Name of the Vulnerable Software and Affected Versions Online Sports Complex Booking System version 1.0 Description The issue is related to SQL Injection via the "/scbs/admin/?page=user/manage user&id=" endpoint. This allows for potential exploitation. No information is provided about the estimate...

PT-2022-19950

Name of the Vulnerable Software and Affected Versions Online Sports Complex Booking System version 1.0 Description The issue concerns a SQL Injection vulnerability via the Master.php file, specifically when the f parameter is set to delete. This vulnerability can be exploited through the...

PT-2022-19956

Name of the Vulnerable Software and Affected Versions Online Sports Complex Booking System version 1.0 Description The issue concerns a SQL Injection vulnerability via the "/scbs/admin/?page=clients/manage client&id=" endpoint. This allows for potential exploitation by injecting malicious SQL cod...

PT-2022-19951

Name of the Vulnerable Software and Affected Versions Online Sports Complex Booking System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the Master.php file, specifically through the f=delete booking parameter. The estimated number of potentiall...

CVE-2022-29988: Improper Neutralization of Special Elements used in an SQL Command

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=delete...

CVE-2022-29317

The CVE-2022-29317 entry concerns Simple Bus Ticket Booking System v1.0. Connected sources confirm SQL injection vulnerabilities in the login flow, specifically via the username and password parameters handled by /assets/partials/_handleLogin.php. The root cause, as described across multiple data...

CVE-2022-29317: Improper Neutralization of Special Elements used in an SQL Command

Simple Bus Ticket Booking System v1.0 was discovered to contain multiple SQL injection vulnerbilities via the username and password parameters at /assets/partials/handleLogin.php...

PT-2022-19535

Name of the Vulnerable Software and Affected Versions Simple Bus Ticket Booking System version 1.0 Description The issue concerns multiple SQL injection vulnerabilities. These vulnerabilities exist via the username and password parameters at the "/assets/partials/ handleLogin.php" API endpoint...

CVE-2022-28094

SCBS Online Sports Venue Reservation System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the fid parameter at booking.php...

Online Sports Complex Booking System 跨站脚本漏洞

Online Sports Complex Booking System is an online sports complex booking system by Carlo Montero, an individual developer. A cross-site scripting vulnerability exists in version v1.0 of the Online Sports Complex Booking System, which was discovered to contain a cross-site scripting XSS...

WordPress Salon booking system Free and Pro访问控制错误漏洞

WordPress is a set of blogging platforms developed by the Wordpress Foundation using the PHP language. The platform supports personal blogging sites on PHP and MySQL servers. WordPress Salon booking system Free and Pro has an access control error vulnerability that stems from improper authorizati...

Wordpress Salon booking system Free and pro信息泄露漏洞

WordPress is the Wordpress Foundation's suite of blogging platforms developed using the PHP language. The platform supports personal blogging sites on PHP and MySQL servers. WordPress Salon booking system Free and pro is vulnerable to an information disclosure vulnerability that could be exploite...

CVE-2022-0920

The Salon booking system Free and Pro WordPress plugins before 7.6.3 do not have proper authorisation in some of its endpoints, which could allow customers to access all bookings and other customer's data...

CVE-2022-0920

The Salon booking system Free and Pro WordPress plugins before 7.6.3 do not have proper authorisation in some of its endpoints, which could allow customers to access all bookings and other customer's data...

Code injection

The Salon booking system Free and Pro WordPress plugins before 7.6.3 do not have proper authorisation in some of its endpoints, which could allow customers to access all bookings and other customer's data...

CVE-2022-0920 Salon booking system < 7.6.3 - Customer+ Bookings/Customers Data Disclosure

The Salon booking system Free and Pro WordPress plugins before 7.6.3 do not have proper authorisation in some of its endpoints, which could allow customers to access all bookings and other customer's data...

CVE-2022-0920

The CVE-2022-0920 entry concerns WordPress plugins “Salon booking system Free and Pro” prior to version 7.6.3. Connected sources consistently describe an access control error in several endpoints that could let authenticated users view all bookings and other customers’ data. The vulnerability ste...

CVE-2022-0919 Salon booking system < 7.6.3 - Unauthenticated Sensitive Data Disclosure

The Salon booking system Free and pro WordPress plugins before 7.6.3 do not have proper authorisation when searching bookings, allowing any unauthenticated users to search other's booking, as well as retrieve sensitive information about the bookings, such as the full name, email and phone number ...

CVE-2022-0920: Incorrect Authorization

The Salon booking system Free and Pro WordPress plugins before 7.6.3 do not have proper authorisation in some of its endpoints, which could allow customers to access all bookings and other customer's data...

PT-2022-13526

Name of the Vulnerable Software and Affected Versions The Salon booking system Free and Pro WordPress plugins versions prior to 7.6.3 Description The issue is related to improper authorization in some endpoints of the plugin, which could allow customers to access all bookings and other customers'...