Lucene search
+L

2057 matches found

CNNVD
CNNVD
added 2024/01/11 12:00 a.m.12 views

PHPJabbers Restaurant Booking System Security Vulnerability

PHPJabbers Restaurant Booking System is a restaurant booking system from the Serbian company PHPJabbers. A security vulnerability exists in PHPJabbers Restaurant Booking System version 3.0, which stems from reflective and stored cross-site scripting and html injection vulnerabilities...

5.4CVSS6.6AI score0.0035EPSS
SaveExploits2References3
CNNVD
CNNVD
added 2024/01/11 12:00 a.m.12 views

PHPJabbers Cinema Booking System Security Vulnerability

PHPJabbers Cinema Booking System is a theater booking system from PHPJabbers. A security vulnerability exists in PHPJabbers Cinema Booking System version 1.0, which stems from a CSV injection vulnerability...

8.8CVSS7.2AI score0.0083EPSS
SaveExploits1References3
Packet Storm
Packet Storm
added 2024/01/11 12:00 a.m.249 views

PHPJabbers Cinema Booking System 1.0 CSV Injection

Exploit Title: PHPJabbers Cinema Booking System v1.0 - CSV Injection Date: 19/12/2023 Exploit Author: BugsBD Limited Discover by: Rahad Chowdhury Vendor Homepage: https://www.phpjabbers.com/ Software Link: https://www.phpjabbers.com/meeting-room-booking-system/sectionDemo Version: v1.0 Tested on:...

7.4AI score0.0083EPSS
SaveExploits1
NVD
NVD
added 2024/01/09 10:15 p.m.26 views

CVE-2024-0346

A vulnerability has been found in CodeAstro Vehicle Booking System 1.0 and classified as problematic. This vulnerability affects unknown code of the file usr/user-give-feedback.php of the component Feedback Page. The manipulation of the argument My Testemonial leads to cross site scripting. The...

5.4CVSS4.3AI score0.00526EPSS
SaveExploits1References3
Prion
Prion
added 2024/01/09 10:15 p.m.27 views

Cross site scripting

A vulnerability has been found in CodeAstro Vehicle Booking System 1.0 and classified as problematic. This vulnerability affects unknown code of the file usr/user-give-feedback.php of the component Feedback Page. The manipulation of the argument My Testemonial leads to cross site scripting. The...

4CVSS6.6AI score0.00526EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2024/01/09 9:31 p.m.20 views

CVE-2024-0346 CodeAstro Vehicle Booking System Feedback Page user-give-feedback.php cross site scripting

A vulnerability has been found in CodeAstro Vehicle Booking System 1.0 and classified as problematic. This vulnerability affects unknown code of the file usr/user-give-feedback.php of the component Feedback Page. The manipulation of the argument My Testemonial leads to cross site scripting. The...

4CVSS6.3AI score0.00526EPSS
SaveExploits1References3
CVE
CVE
added 2024/01/09 9:31 p.m.52 views

CVE-2024-0346

CVE-2024-0346: In CodeAstro Vehicle Booking System 1.0, the Feedback Page’s usr/user-give-feedback.php accepts and manipulates the parameter My Testemonial to trigger cross-site scripting. Attacks are remote and the exploit has been disclosed publicly. The connected documents do not provide a con...

5.4CVSS5.3AI score0.00526EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2024/01/09 9:31 p.m.44 views

CVE-2024-0346 CodeAstro Vehicle Booking System Feedback Page user-give-feedback.php cross site scripting

A vulnerability has been found in CodeAstro Vehicle Booking System 1.0 and classified as problematic. This vulnerability affects unknown code of the file usr/user-give-feedback.php of the component Feedback Page. The manipulation of the argument My Testemonial leads to cross site scripting. The...

4CVSS5.5AI score0.00526EPSS
SaveExploits1References3
OSV
OSV
added 2024/01/09 9:15 p.m.11 views

CVE-2024-0345

A vulnerability, which was classified as problematic, was found in CodeAstro Vehicle Booking System 1.0. This affects an unknown part of the file usr/usr-register.php of the component User Registration. The manipulation of the argument FullName/LastName/Address with the input alertdocument.cookie...

6.1CVSS3.7AI score0.00634EPSS
SaveExploits1References3
NVD
NVD
added 2024/01/09 9:15 p.m.27 views

CVE-2024-0345

A vulnerability, which was classified as problematic, was found in CodeAstro Vehicle Booking System 1.0. This affects an unknown part of the file usr/usr-register.php of the component User Registration. The manipulation of the argument FullName/LastName/Address with the input alertdocument.cookie...

6.1CVSS4.7AI score0.00634EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2024/01/09 9:00 p.m.11 views

CVE-2024-0345 CodeAstro Vehicle Booking System User Registration usr-register.php cross site scripting

A vulnerability, which was classified as problematic, was found in CodeAstro Vehicle Booking System 1.0. This affects an unknown part of the file usr/usr-register.php of the component User Registration. The manipulation of the argument FullName/LastName/Address with the input alertdocument.cookie...

5CVSS6AI score0.00634EPSS
SaveExploits1References3
CVE
CVE
added 2024/01/09 9:00 p.m.74 views

CVE-2024-0345

CVE-2024-0345 affects CodeAstro Vehicle Booking System 1.0, in the User Registration component (usr/usr-register.php). A cross-site scripting vulnerability arises from manipulating the arguments Full_Name, Last_Name, or Address with input such as , enabling remote exploitation. The exploit has be...

6.1CVSS6AI score0.00634EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2024/01/09 9:00 p.m.50 views

CVE-2024-0345 CodeAstro Vehicle Booking System User Registration usr-register.php cross site scripting

A vulnerability, which was classified as problematic, was found in CodeAstro Vehicle Booking System 1.0. This affects an unknown part of the file usr/usr-register.php of the component User Registration. The manipulation of the argument FullName/LastName/Address with the input alertdocument.cookie...

5CVSS6.2AI score0.00634EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2024/01/09 12:00 a.m.11 views

Vehicle Booking System Cross-Site Scripting Vulnerability

Vehicle Booking System is a vehicle booking system by Martin Mbithi Nzilani, an individual developer. A cross-site scripting vulnerability exists in Vehicle Booking System version 1.0, which originates in the usr/usr-register.php in the component User Registration, which contains unknown code tha...

6.1CVSS6.2AI score0.00634EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2024/01/09 12:00 a.m.11 views

PT-2024-15481 · Codeastro · Codeastro Vehicle Booking System

Name of the Vulnerable Software and Affected Versions: CodeAstro Vehicle Booking System version 1.0 Description: A problematic issue was found in the User Registration component, specifically in the file usr/usr-register.php. The manipulation of the Full Name, Last Name, or Address arguments with...

6.1CVSS4.7AI score0.00634EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2024/01/09 12:00 a.m.9 views

Vehicle Booking System Cross-Site Scripting Vulnerability

Vehicle Booking System is a vehicle booking system by Martin Mbithi Nzilani, an individual developer. A cross-site scripting vulnerability exists in Vehicle Booking System version 1.0, which originates from the usr/user-give-feedback.php in the component Feedback Page, which contains unknown code...

5.4CVSS6.2AI score0.00526EPSS
SaveExploits1References4
OpenVAS
OpenVAS
added 2024/01/05 12:00 a.m.31 views

WordPress Booking Calendar, Appointment Booking System Plugin < 3.2.2 File Upload Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wpdevart:bookingcalendar"; if description...

9.8CVSS9.7AI score0.04493EPSS
SaveExploits2References1
OSV
OSV
added 2023/12/25 3:15 a.m.11 views

CVE-2023-7100

A vulnerability, which was classified as critical, was found in PHPGurukul Restaurant Table Booking System 1.0. Affected is an unknown function of the file /admin/bwdates-report-details.php. The manipulation of the argument fdate/tdate leads to sql injection. It is possible to launch the attack...

9.8CVSS5.7AI score0.0072EPSS
SaveExploits1References5
CVE
CVE
added 2023/12/25 3:00 a.m.68 views

CVE-2023-7100

The CVE-2023-7100 entry describes a SQL injection in PHPGurukul’s Restaurant Table Booking System 1.0, stemming from an unknown function in /admin/bwdates-report-details.php. The vulnerability is triggered by manipulating the fdate (and tdate) parameter(s), allowing remote attacker access. Public...

9.8CVSS8.3AI score0.0072EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2023/12/14 3:34 p.m.37 views

CVE-2023-49173 WordPress 10to8 Online Appointment Booking System Plugin <= 1.0.9 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in 10to8 Sign In Scheduling Online Appointment Booking System allows Stored XSS.This issue affects Sign In Scheduling Online Appointment Booking System: from n/a through 1.0.9...

6.5CVSS6.6AI score0.00377EPSS
SaveExploits0References1
Rows per page
Query Builder