PHPGurukul Boat Booking System SQL注入漏洞

PHPGurukul Boat Booking System is a boat booking system from PHPGurukul. An injection vulnerability exists in version 1.0 of the PHPGurukul Boat Booking System, which originates from an SQL injection vulnerability contained in the nopeople parameter in the book-boat.php?bid=1 page of the Book a...

PHPGurukul Boat Booking System SQL注入漏洞

PHPGurukul Boat Booking System is a boat booking system from PHPGurukul. A SQL injection vulnerability exists in version 1.0 of the PHPGurukul Boat Booking System, which originates from an SQL injection vulnerability in the emailid parameter in the status.php page of the Check Booking Status Page...

CVE-2024-49304

Cross-Site Request Forgery CSRF vulnerability in DOTonPAPER Pinpoint Booking System booking-system allows Stored XSS.This issue affects Pinpoint Booking System: from n/a through = 2.9.9.5.7...

CVE-2024-49304

CVE-2024-49304 affects the Pinpoint Booking System WordPress plugin (versions up to 2.9.9.5.1). The vulnerability is a CSRF that enables Stored XSS. Patch/mitigation: Upgrade to Pinpoint Booking System 2.9.9.5.7 or later (per Patchstack: CSRF to Stored XSS vulnerability fixed in newer release). C...

CVE-2024-49304 WordPress Pinpoint Booking System plugin <= 2.9.9.5.7 - CSRF to Stored Cross Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF vulnerability in DOTonPAPER Pinpoint Booking System booking-system allows Stored XSS.This issue affects Pinpoint Booking System: from n/a through = 2.9.9.5.7...

CVE-2024-49304 WordPress Pinpoint Booking System plugin <= 2.9.9.5.7 - CSRF to Stored Cross Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF vulnerability in DOTonPAPER Pinpoint Booking System booking-system allows Stored XSS.This issue affects Pinpoint Booking System: from n/a through = 2.9.9.5.7...

PT-2024-33443 · Unknown · Pinpoint Booking System

Name of the Vulnerable Software and Affected Versions: Pinpoint Booking System versions through 2.9.9.5.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that also allows Stored XSS in the Pinpoint Booking System. Recommendations: For versions through 2.9.9.5.1, at the...

WordPress plugin Pinpoint Booking System 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site request forgery...

WordPress Pinpoint Booking System plugin <= 2.9.9.5.7 - CSRF to Stored Cross Site Scripting (XSS) vulnerability

CSRF to Stored Cross Site Scripting XSS vulnerability discovered by Muhammad Daffa Patchstack Alliance in WordPress Plugin Pinpoint Booking System versions = 2.9.9.5.7...

WordPress Pinpoint Booking System Plugin <= 2.9.9.5.2 is vulnerable to Cross Site Request Forgery (CSRF)

Software Pinpoint Booking System Type Plugin Vulnerable versions = 2.9.9.5.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Request Forgery CSRF CVE CVE-2024-49304 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID b643a828e56e Credits Muhammad Daffa Requir...

CVE-2024-44039 WordPress WP Travel plugin <= 9.3.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Travel WP Travel wp-travel allows Stored XSS.This issue affects WP Travel: from n/a through = 9.3.1...

CVE-2024-47316

Authorization Bypass Through User-Controlled Key vulnerability in Salon Booking System Salon booking system.This issue affects Salon booking system: from n/a through 10.9...

CVE-2024-47316

Authorization Bypass Through User-Controlled Key vulnerability in Dimitri Grassi Salon booking system salon-booking-system.This issue affects Salon booking system: from n/a through = 10.9...

CVE-2024-47316 WordPress Salon Booking Wordpress Plugin plugin <= 10.9 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in Dimitri Grassi Salon booking system salon-booking-system.This issue affects Salon booking system: from n/a through = 10.9...

CVE-2024-47316

CVE-2024-47316 affects the WordPress Salon Booking System plugin (versions

PT-2024-32528 · Unknown · Salon Booking System

Name of the Vulnerable Software and Affected Versions: Salon Booking System versions through 10.9 Description: The issue is related to an Authorization Bypass Through User-Controlled Key vulnerability. This vulnerability affects the Salon Booking System, allowing for potential unauthorized access...

WordPress plugin Salon booking system 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

Online Flight Booking System 1.0 Arbitrary File Upload

============================================================================================================================================================================= | Title : Online Flight Booking System 1.0 Remot File Upload vulnerability | | Author : indoushka | | Tested on : windows 1...

WordPress Salon booking system Plugin <= 10.9 is vulnerable to Insecure Direct Object References (IDOR)

Software Salon booking system Type Plugin Vulnerable versions = 10.9 Fixed in 10.9.1 OWASP Top 10 A1: Broken Access Control Classification Insecure Direct Object References IDOR CVE CVE-2024-47316 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID ecb95cdb72ad Credits...

Online Flight Booking System 1.0 Cross Site Request Forgery

============================================================================================================================================================================= | Title : Online Flight Booking System 1.0 CSRF Add Admin vulnerability | | Author : indoushka | | Tested on : windows 10...