Lucene search
+L

2057 matches found

Kitploit
Kitploit
added 2026/09/17 4:44 a.m.9 views

CVE-2025-22785

CVE-2025-22785 Course Booking System = 6.0.5 - 認証なしSQLインジェクション 説明 WordPress用プラグインCourse Booking Systemは、バージョン6.0.5以前において、ユーザーが指定するパラメータに対するエスケープ処理が不十分であり、既存のSQLクエリの準備が十分に行われていないため、SQLインジェクションの脆弱性があります。これにより、認証されていない攻撃者は、既存のクエリに追加のSQLクエリを追加し、データベースから機密情報を抽出するために使用できます。 詳細 タイプ : プラグイン スラッグ :...

9.3CVSS8.3AI score0.02929EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/16 7:30 p.m.8 views

CVE-2025-25965

CVE-2025-25965:在线宴会预订系统v1.2中的跨站请求伪造CSRF 简介 跨站请求伪造CSRF仍然是当今影响Web应用程序的最被忽视但最危险的漏洞之一。CVE-2025-25965 是Phpgurukul在线宴会预订系统v1.2 中新发现的CSRF漏洞,允许远程攻击者利用已认证的会话在未经用户同意的情况下更改用户的电子邮件地址。 漏洞概述 CVE ID : CVE-2025-25965 漏洞类型 : 跨站请求伪造CSRF 受影响产品 : Online Banquet Booking System - v1.2 受影响组件 : 用户资料更新功能 profile.php 影响 :...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/16 8:14 a.m.13 views

CVE-2024-57429

CVE-2024-57429 PHPJabbers Cinema Booking System v2.0 の pjActionUpdate 関数におけるクロスサイトリクエストフォージェリ CSRF の脆弱性により、リモートの攻撃者が認証済み管理者を騙して不正なリクエストを送信させることで、権限を昇格させることが可能です。 影響: この CSRF 脆弱性の悪用により、以下のような不正な操作が発生する可能性があります: 管理者のパスワードを変更し、実質的にロックアウトする。 攻撃者のユーザーロールを管理者に更新することで、権限を昇格させる。 エクスプロイト - 概念実証 PoC...

5.4CVSS6.6AI score0.00284EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/12 3:20 p.m.9 views

CVE-2025-46181-XSS

CVE-2025-46181 - オンライン予約システムにおける反射型XSS CVE-ID : CVE-2025-46181 発見者 : Shemkumar P shemkumar.github.io 脆弱性タイプ : 反射型クロスサイトスクリプティング XSS 深刻度 : 中 ステータス : 公開済み、MITREによりCVE割り当て ✨ 説明 公開されているオンライン予約システム(v1.0)の、特に予約確認を処理するページにおいて、反射型クロスサイトスクリプティング XSS...

6.2AI score
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/11 6:02 p.m.4 views

cve-disclosures

CVE 披露 — Aman Bahiniya MITRE 于 2024 年 12 月分配了三个 CVE。这些记录已被保留但从未 发布,因此目前尚无任何索引。本仓库发布这些公告,以便 这些 CVE 变得可搜索并获得归属。 CVE| 产品| 类型 ---|---|--- CVE-2024-57551| Online Food Ordering System v2.0| 任意文件上传 → RCE CVE-2024-57552| Online Food Ordering System v2.0| 存储型 XSS CVE-2024-57553| Online Flight Booking...

5.8AI score
SaveExploits1References4
Kitploit
Kitploit
added 2026/09/10 11:57 p.m.8 views

CVE-2025-7753

🚨 CVE-2025-7753 — SQLインジェクション PoC Exploit 作者: Byte Reaper Telegram: @ByteReaper0 CVE: CVE‑2025‑7753 脆弱性: 認証不要、時間ベースSQLインジェクション 🔍 概要 Online Appointment Booking System 1.0 Code‑Projects のファイル /admin/adddoctor.php に深刻なSQLインジェクション脆弱性が存在します。username...

9.8CVSS7.8AI score0.00426EPSS
SaveExploits2
NVD
NVD
added 2026/09/10 3:17 p.m.9 views

CVE-2026-81793

Unauthenticated Broken Access Control in Salon booking system = 10.31.5 versions...

6.5CVSS0.00205EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/10 2:23 p.m.8 views

EUVD-2026-75524

Unauthenticated Broken Access Control in Salon booking system = 10.31.5 versions...

6.5CVSS5.7AI score0.00205EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/10 2:23 p.m.18 views

CVE-2026-81793

An unauthenticated Broken Access Control vulnerability affects the WordPress Salon booking system plugin in versions 10.31.5 and earlier . Discovered by Tiago Ventura (@perses), the flaw allows attackers to access or modify data with low integrity and low availability impact without requiring any...

6.5CVSS5.7AI score0.00205EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/10 2:23 p.m.47 views

CVE-2026-81793 WordPress Salon booking system plugin <= 10.31.5 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Salon booking system = 10.31.5 versions...

6.5CVSS0.00205EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2026/09/08 1:29 p.m.8 views

WordPress Salon booking system plugin <= 10.31.5 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Tiago Ventura @perses in WordPress Plugin Salon booking system versions = 10.31.5...

6.5CVSS5.7AI score0.00205EPSS
SaveExploits0Affected Software1
GithubExploit
GithubExploit
added 2026/09/04 10:52 a.m.15 views

cve-disclosures

CVE Disclosures — Aman Bahiniya Three CVEs assigned by MITRE...

5.7AI score
SaveExploits1
Patchstack
Patchstack
added 2026/08/27 11:12 a.m.9 views

WordPress Salon booking system plugin <= 10.31.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Daniel Dhaniswara in WordPress Plugin Salon booking system versions = 10.31.1...

4.8CVSS5.9AI score0.00171EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2026/08/27 11:11 a.m.6 views

WordPress Salon booking system plugin <= 10.31.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Muni Nitish Kumar Yaddala in WordPress Plugin Salon booking system versions = 10.31.1...

4.3CVSS5.9AI score0.00162EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2026/08/20 7:57 a.m.11 views

WordPress Salon Booking System - Free Version plugin < 10.30.34 - Unauthenticated Arbitrary Booking Total Tampering vulnerability

WordPress Salon Booking System - Free Version plugin 10.30.34 - Unauthenticated Arbitrary Booking Total Tampering vulnerability discovered by Muni Nitish Kumar Yaddala in WordPress Plugin Salon booking system versions 10.30.34...

5.3CVSS5.2AI score0.00182EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2026/08/19 6:17 a.m.13 views

CVE-2026-14334

The Booking calendar, Appointment Booking System WordPress plugin through 3.2.36 does not properly sanitize uploaded SVG files, allowing unauthenticated attackers to upload a file that bypasses the Booking calendar, Appointment Booking System WordPress plugin through 3.2.36's script-stripping and...

8.8CVSS0.00361EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/19 6:00 a.m.37 views

CVE-2026-14334 Booking calendar, Appointment Booking System <= 3.2.36 - Unauthenticated Stored XSS via SVG File Upload

The Booking calendar, Appointment Booking System WordPress plugin through 3.2.36 does not properly sanitize uploaded SVG files, allowing unauthenticated attackers to upload a file that bypasses the Booking calendar, Appointment Booking System WordPress plugin through 3.2.36's script-stripping and...

0.00361EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/19 6:00 a.m.43 views

CVE-2026-14334

The Booking calendar, Appointment Booking System WordPress plugin (versions up to 3.2.36) fails to sanitize uploaded SVG files, allowing unauthenticated attackers to inject JavaScript that executes in an administrator's session when reviewing a submitted booking. CVSS 3.1 base score is 8.8 (HIGH)...

8.8CVSS5.5AI score0.00361EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/19 6:00 a.m.14 views

EUVD-2026-62264

The Booking calendar, Appointment Booking System WordPress plugin through 3.2.36 does not properly sanitize uploaded SVG files, allowing unauthenticated attackers to upload a file that bypasses the Booking calendar, Appointment Booking System WordPress plugin through 3.2.36's script-stripping and...

8.8CVSS5.5AI score0.00361EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/08/19 12:00 a.m.18 views

PT-2026-78278

Name of the Vulnerable Software and Affected Versions Booking calendar, Appointment Booking System WordPress plugin versions prior to 3.2.37 Description The plugin fails to properly sanitize uploaded SVG files. This allows unauthenticated attackers to upload a file that bypasses the...

8.8CVSS5.5AI score0.00361EPSS
SaveExploits0References4
Rows per page
Query Builder