Lucene search
+L

2590 matches found

Openbugbounty
Openbugbounty
•added 2020/09/01 10:44 a.m.•13 views

booking.myguestcare.com Cross Site Scripting vulnerability OBB-1292521

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
SaveExploits0
CNVD
CNVD
•added 2020/08/28 12:00 a.m.•17 views

Online Hotel Booking System Pro Cross-Site Scripting Vulnerability (CNVD-2020-52192)

Online Hotel Booking System Pro is a hotel booking system. A cross-site scripting vulnerability exists in the customer registration form in Online Hotel Booking System Pro 1.3, which can be exploited by an attacker to execute client-side code...

5.4CVSS6.4AI score0.00602EPSS
SaveExploits1References1
NVD
NVD
•added 2020/08/27 3:15 p.m.•27 views

CVE-2020-23984

Online Hotel Booking System Pro PHP Version 1.3 has Persistent Cross-site Scripting in Customer registration-form all-tags...

5.4CVSS5.5AI score0.00602EPSS
SaveExploits1References1
CVE
CVE
•added 2020/08/27 2:31 p.m.•63 views

CVE-2020-23984

CVE-2020-23984 affects Online Hotel Booking System Pro PHP Version 1.3, with a persistent cross-site scripting flaw in the Customer registration-form all-tags. The Red Hat/CNVD/NVD entries corroborate a client-side script execution vulnerability in the registration form. No explicit remediation o...

5.4CVSS5.5AI score0.00602EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2020/08/27 2:31 p.m.•35 views

CVE-2020-23984

Online Hotel Booking System Pro PHP Version 1.3 has Persistent Cross-site Scripting in Customer registration-form all-tags...

5.5AI score0.00602EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/08/27 12:00 a.m.•6 views

CVE-2020-23984: Improper Neutralization of Input During Web Page Generation

Online Hotel Booking System Pro PHP Version 1.3 has Persistent Cross-site Scripting in Customer registration-form all-tags...

5.4CVSS5.7AI score0.00602EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2020/08/27 12:00 a.m.•4 views

PT-2020-15616

Name of the Vulnerable Software and Affected Versions Online Hotel Booking System Pro PHP version 1.3 Description The issue is related to Persistent Cross-site Scripting in the customer registration form, allowing malicious code to be executed. This affects the all-tags section of the form...

5.4CVSS0.00602EPSS
SaveExploits1References3
zdt
zdt
•added 2020/07/15 12:00 a.m.•216 views

Web Based Online Hotel Booking System 0.1.0 - Authentication Bypass Vulnerability

Exploit for php platform in category web applications Exploit Title: Web Based Online Hotel Booking System 0.1.0 - Authentication Bypass Exploit Author: KeopssGroup0day,Inc Vendor Homepage: https://github.com/mrzulkarnine/Web-based-hotel-booking-system Software Link:...

0.1AI score
SaveExploits0
CNVD
CNVD
•added 2020/07/06 12:00 a.m.•11 views

WordPress bestsoftinc Hotel Booking System Pro Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. bestsoftinc Hotel Booking System Pro is a hotel booking system plugin used in it. A cross-site scripting vulnerability exists in...

6.1CVSS6.2AI score0.01167EPSS
SaveExploits2References1
OSV
OSV
•added 2020/07/05 4:15 p.m.•12 views

CVE-2020-15536

An issue was discovered in the bestsoftinc Hotel Booking System Pro plugin through 1.1 for WordPress. Persistent XSS can occur via any of the registration fields...

6.1CVSS6.4AI score0.01167EPSS
SaveExploits2References2
Prion
Prion
•added 2020/07/05 4:15 p.m.•24 views

Design/Logic Flaw

An issue was discovered in the bestsoftinc Hotel Booking System Pro plugin through 1.1 for WordPress. Persistent XSS can occur via any of the registration fields...

4.3CVSS6AI score0.01167EPSS
SaveExploits2References2Affected Software1
Cvelist
Cvelist
•added 2020/07/05 3:13 p.m.•36 views

CVE-2020-15536

An issue was discovered in the bestsoftinc Hotel Booking System Pro plugin through 1.1 for WordPress. Persistent XSS can occur via any of the registration fields...

6.1AI score0.01167EPSS
SaveExploits2References2
CVE
CVE
•added 2020/07/05 3:13 p.m.•78 views

CVE-2020-15536

The CVE-2020-15536 entry concerns the WordPress plugin bestsoftinc Hotel Booking System Pro (versions up to 1.1). Multiple connected sources confirm a persistent (stored) cross-site scripting vulnerability affecting registration/booking input fields, allowing injected script to execute in context...

6.1CVSS5.9AI score0.01167EPSS
SaveExploits2References2Affected Software1
Positive Technologies
Positive Technologies
•added 2020/07/05 12:00 a.m.•3 views

PT-2020-14486

Name of the Vulnerable Software and Affected Versions bestsoftinc Hotel Booking System Pro plugin versions 1.1 and earlier Description An issue in the plugin allows persistent XSS to occur via any of the registration fields. Recommendations For bestsoftinc Hotel Booking System Pro plugin versions...

6.1CVSS0.01167EPSS
SaveExploits2References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/07/05 12:00 a.m.•8 views

CVE-2020-15536: Improper Neutralization of Input During Web Page Generation

An issue was discovered in the bestsoftinc Hotel Booking System Pro plugin through 1.1 for WordPress. Persistent XSS can occur via any of the registration fields...

6.1CVSS5.8AI score0.01167EPSS
SaveExploits2References2
Packet Storm
Packet Storm
•added 2020/04/04 12:00 a.m.•179 views

WordPress Hotel Booking System Pro 1.1 Cross Site Scripting

Exploit Title: WordPress Hotel Booking System Pro v1.1 XSS Vunlerability Google Dork:N/A Date: 2020-04-04 Exploit Author: @ThelastVvV Vendor Homepage: https://codecanyon.net/item/online-hotel-booking-system-pro-wordpress-plugin/9338914 Version: 1.1 Tested on: 5.4.0-4parrot1-amd64...

SaveExploits0
wpexploit
wpexploit
•added 2020/04/04 12:00 a.m.•33 views

Online Hotel Booking System Pro <= 1.1 - Unauthenticated Stored Cross-Site Scripting (XSS)

An unauthenticated user can inject malicious JavaScript via the booking form, specifically in the new user details.. The XSS payload is then executed when an authenticated administrator user views the booking on the Customer-booking page. Inject XSS via most fields in the booking form, which will...

4.3CVSS0.7AI score0.01167EPSS
SaveExploits2References2
CNVD
CNVD
•added 2019/10/17 12:00 a.m.•19 views

WordPress booking-system plugin SQL injection vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. booking-system is an online booking system plugin used in it. A SQL injection vulnerability exists in the WordPress booking-system...

8.8CVSS8AI score0.01927EPSS
SaveExploits1References1
NVD
NVD
•added 2019/10/10 4:15 p.m.•25 views

CVE-2015-9460

The booking-system plugin before 2.1 for WordPress has DOPBSPBackEndTranslation::display SQL injection via the language parameter...

8.8CVSS9.2AI score0.01927EPSS
SaveExploits1References3
Prion
Prion
•added 2019/10/10 4:15 p.m.•18 views

Sql injection

The booking-system plugin before 2.1 for WordPress has DOPBSPBackEndTranslation::display SQL injection via the language parameter...

6.5CVSS8.4AI score0.01927EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder