Lucene search
+L

2050 matches found

Cvelist
Cvelist
added 2025/08/27 5:45 p.m.18 views

CVE-2025-58213 WordPress Booking System Trafft Plugin <= 1.0.14 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ameliabooking Booking System Trafft booking-system-trafft allows Stored XSS.This issue affects Booking System Trafft: from n/a through = 1.0.14...

6.5CVSS0.00165EPSS
SaveExploits0References1
CVE
CVE
added 2025/08/27 5:45 p.m.19 views

CVE-2025-58213

CVE-2025-58213 affects the Booking System Trafft WordPress plugin. The issue is a Stored Cross-Site Scripting (XSS) caused by improper input neutralization during web page generation, affecting Trafft versions up to 1.0.14. The vulnerability is documented with a CVSS v3.1 base score of 6.5 (Mediu...

6.5CVSS5.9AI score0.00165EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/08/27 12:00 a.m.10 views

WordPress plugin Booking System Trafft 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

6.5CVSS5.7AI score0.00165EPSS
SaveExploits0References2
OSV
OSV
added 2025/08/14 5:15 p.m.9 views

CVE-2025-8970

A vulnerability was found in itsourcecode Online Tour and Travel Management System 1.0. This affects an unknown part of the file /admin/operations/booking.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclose...

9.8CVSS5.7AI score0.00421EPSS
SaveExploits1References5
OSV
OSV
added 2025/08/14 11:15 a.m.10 views

CVE-2025-8957

A vulnerability was determined in Campcodes Online Flight Booking Management System 1.0. Affected is an unknown function of the file /flights.php. The manipulation of the argument departureairportid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclos...

9.8CVSS5.7AI score0.00403EPSS
SaveExploits0References6
OSV
OSV
added 2025/08/14 9:15 a.m.10 views

CVE-2025-8952

A vulnerability was found in Campcodes Online Flight Booking Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/ajax.php?action=login of the component Login. The manipulation of the argument Username leads to sql injection. The attack can be...

9.8CVSS5.7AI score0.00403EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2025/08/14 12:00 a.m.9 views

Campcodes Online Flight Booking Management System 注入漏洞

CampCodes Online Flight Booking Management System is an online flight booking management system from CampCodes Philippines. An injection vulnerability exists in Campcodes Online Flight Booking Management System version 1.0, which originates from a SQL injection due to the incorrect operation of t...

9.8CVSS7.8AI score0.00403EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2025/08/14 12:00 a.m.4 views

CampCodes Online Flight Booking Management System 注入漏洞

CampCodes Online Flight Booking Management System is an online flight booking management system from CampCodes Philippines. An injection vulnerability exists in version 1.0 of the CampCodes Online Flight Booking Management System, which originates from a SQL injection due to an incorrect...

9.8CVSS7.8AI score0.00503EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2025/08/14 12:00 a.m.9 views

PT-2025-33260 · Unknown · Campcodes Online Flight Booking Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Flight Booking Management System version 1.0 Description: A SQL injection issue exists in Campcodes Online Flight Booking Management System version 1.0. Manipulation of the departure airport id argument in the /flights.php fi...

9.8CVSS7.6AI score0.00403EPSS
SaveExploits0References10
CNNVD
CNNVD
added 2025/08/14 12:00 a.m.10 views

CampCodes Online Flight Booking Management System 注入漏洞

CampCodes Online Flight Booking Management System is an online flight booking management system from CampCodes Philippines. An injection vulnerability exists in version 1.0 of the CampCodes Online Flight Booking Management System, which originates from a SQL injection due to a misbehavior of the...

9.8CVSS7.9AI score0.00403EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2025/08/03 2:14 p.m.14 views

CVE-2025-8431

A vulnerability has been found in PHPGurukul Boat Booking System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/add-boat.php. The manipulation of the argument boatname leads to sql injection. The attack can be initiated remotely. The exploit has been...

9.8CVSS7.5AI score0.00525EPSS
SaveExploits1References1
OSV
OSV
added 2025/08/01 2:15 a.m.9 views

CVE-2025-8431

A vulnerability has been found in PHPGurukul Boat Booking System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/add-boat.php. The manipulation of the argument boatname leads to sql injection. The attack can be initiated remotely. The exploit has been...

9.8CVSS5.8AI score0.00525EPSS
SaveExploits1References5
NVD
NVD
added 2025/08/01 2:15 a.m.12 views

CVE-2025-8431

A vulnerability has been found in PHPGurukul Boat Booking System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/add-boat.php. The manipulation of the argument boatname leads to sql injection. The attack can be initiated remotely. The exploit has been...

9.8CVSS0.00525EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/08/01 1:32 a.m.27 views

CVE-2025-8431 PHPGurukul Boat Booking System add-boat.php sql injection

A vulnerability has been found in PHPGurukul Boat Booking System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/add-boat.php. The manipulation of the argument boatname leads to sql injection. The attack can be initiated remotely. The exploit has been...

7.5CVSS0.00525EPSS
SaveExploits1References5
CVE
CVE
added 2025/08/01 1:32 a.m.46 views

CVE-2025-8431

CVE-2025-8431 affects PHPGurukul Boat Booking System 1.0, specifically the vulnerable file /admin/add-boat.php where the boatname parameter is susceptible to SQL injection. The issue enables remote exploitation and has been publicly disclosed. Impact is described as a critical vulnerability in mu...

9.8CVSS7.6AI score0.00525EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/08/01 1:32 a.m.7 views

CVE-2025-8431 PHPGurukul Boat Booking System add-boat.php sql injection

A vulnerability has been found in PHPGurukul Boat Booking System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/add-boat.php. The manipulation of the argument boatname leads to sql injection. The attack can be initiated remotely. The exploit has been...

7.5CVSS7.5AI score0.00525EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/08/01 12:00 a.m.19 views

PT-2025-31595 · Phpgurukul · Phpgurukul Boat Booking System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Boat Booking System version 1.0 Description: A critical issue exists in PHPGurukul Boat Booking System 1.0, specifically within the /admin/add-boat.php file. The boatname argument is susceptible to SQL injection, allowing for remot...

9.8CVSS7.7AI score0.00525EPSS
SaveExploits1References10
CNNVD
CNNVD
added 2025/08/01 12:00 a.m.10 views

PHPGurukul Boat Booking System 注入漏洞

PHPGurukul Boat Booking System is a boat booking system from PHPGurukul. An injection vulnerability exists in version 1.0 of the PHPGurukul Boat Booking System, which stems from SQL injection due to incorrect manipulation of the parameter boatname in the file /admin/add-boat.php...

9.8CVSS7.8AI score0.00525EPSS
SaveExploits1References6
CNVD
CNVD
added 2025/07/23 12:00 a.m.7 views

Online Banquet Booking System login.php file cross-site scripting vulnerability

Online Banquet Booking System is an online banquet booking system. A cross-site scripting vulnerability exists in Online Banquet Booking System, which originates from the userlogin/userpassword parameters not being effectively filtered in the /admin/login.php file. The vulnerability can be...

6.1CVSS4.6AI score0.00464EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/07/23 12:00 a.m.14 views

Online Banquet Booking System Cross-Site Scripting Vulnerability

Online Banquet Booking System is an online banquet booking system. A cross-site scripting vulnerability exists in Online Banquet Booking System, which originates from the failure to strictly filter the adminname parameter in the /admin/admin-profile.php file. An attacker can exploit this...

5.4CVSS6.3AI score0.00314EPSS
SaveExploits1References1
Rows per page
Query Builder