Lucene search
+L

2057 matches found

CVE
CVE
added 2023/12/14 3:34 p.m.127 views

CVE-2023-49173

CVE-2023-49173 affects the 10to8 Online Appointment Booking System WordPress plugin (Sign In Scheduling Online Appointment Booking System). It is a Cross-Site Scripting (XSS) vulnerability caused by improper input neutralization during web page generation, leading to Stored XSS in versions up to ...

6.5CVSS6.7AI score0.00377EPSS
SaveExploits0References1Affected Software1
WPVulnDB
WPVulnDB
added 2023/12/09 12:00 a.m.24 views

WP Booking System < 2.0.19.3 - Missing Authorization

Description The WP Booking System plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the wpbssavecalendardata function in versions up to, and including, 2.0.19.2. This makes it possible for authenticated attackers, with subscriber-level access and above...

6.7AI score0.00404EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2023/12/04 12:00 a.m.11 views

WordPress WP Booking System Plugin <= 2.0.19.2 is vulnerable to Broken Access Control

Software WP Booking System Type Plugin Vulnerable versions = 2.0.19.2 Fixed in 2.0.19.3 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-49758 Patch priority Medium CVSS severity Medium 4.3 Developer Claim ownership PSID b7e70f6e3332 Credits Abdi Pranata...

6.5AI score0.00404EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2023/12/01 3:15 a.m.25 views

CVE-2023-48016

Restaurant Table Booking System V1.0 is vulnerable to SQL Injection in rtbs/admin/index.php via the username parameter...

7.5CVSS0.00664EPSS
SaveExploits1References1
Prion
Prion
added 2023/12/01 3:15 a.m.24 views

Sql injection

Restaurant Table Booking System V1.0 is vulnerable to SQL Injection in rtbs/admin/index.php via the username parameter...

5CVSS8.4AI score0.00664EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2023/12/01 12:00 a.m.37 views

CVE-2023-48016

Restaurant Table Booking System V1.0 is vulnerable to SQL Injection in rtbs/admin/index.php via the username parameter...

8.1AI score0.00664EPSS
SaveExploits1References1
Patchstack
Patchstack
added 2023/11/29 12:00 a.m.106 views

WordPress 10to8 Online Appointment Booking System Plugin <= 1.0.9 is vulnerable to Cross Site Scripting (XSS)

Software 10to8 Online Appointment Booking System Type Plugin Vulnerable versions = 1.0.9 Fixed in 1.1.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-49173 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 11459360bec5 Credits Ngô Thiên An...

6.5CVSS6.6AI score0.00377EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2023/11/10 4:15 p.m.24 views

CVE-2023-6076

A vulnerability classified as problematic was found in PHPGurukul Restaurant Table Booking System 1.0. Affected by this vulnerability is an unknown functionality of the file booking-details.php of the component Reservation Status Handler. The manipulation of the argument bid leads to information...

7.5CVSS0.00959EPSS
SaveExploits0References2
Prion
Prion
added 2023/11/10 4:15 p.m.19 views

Information disclosure

A vulnerability classified as problematic was found in PHPGurukul Restaurant Table Booking System 1.0. Affected by this vulnerability is an unknown functionality of the file booking-details.php of the component Reservation Status Handler. The manipulation of the argument bid leads to information...

5CVSS6.8AI score0.00959EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2023/11/10 3:31 p.m.38 views

CVE-2023-6076 PHPGurukul Restaurant Table Booking System Reservation Status booking-details.php information disclosure

A vulnerability classified as problematic was found in PHPGurukul Restaurant Table Booking System 1.0. Affected by this vulnerability is an unknown functionality of the file booking-details.php of the component Reservation Status Handler. The manipulation of the argument bid leads to information...

5.3CVSS7.6AI score0.00959EPSS
SaveExploits0References2
CVE
CVE
added 2023/11/10 3:31 p.m.64 views

CVE-2023-6076

The CVE-2023-6076 entry concerns PHPGurukul Restaurant Table Booking System 1.0. The vulnerability affects the function in booking-details.php of the Reservation Status Handler, where manipulating the bid argument leads to information disclosure. It is described as exploitable remotely, impacting...

7.5CVSS6.1AI score0.00959EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2023/11/10 3:15 p.m.8 views

CVE-2023-6075

A vulnerability classified as problematic has been found in PHPGurukul Restaurant Table Booking System 1.0. Affected is an unknown function of the file index.php of the component Reservation Request Handler. The manipulation leads to cross site scripting. It is possible to launch the attack...

6.1CVSS3.9AI score0.00491EPSS
SaveExploits0References2
NVD
NVD
added 2023/11/10 3:15 p.m.22 views

CVE-2023-6074

A vulnerability was found in PHPGurukul Restaurant Table Booking System 1.0. It has been rated as critical. This issue affects some unknown processing of the file check-status.php of the component Booking Reservation Handler. The manipulation leads to sql injection. The attack may be initiated...

9.8CVSS0.00697EPSS
SaveExploits0References2
Prion
Prion
added 2023/11/10 3:15 p.m.32 views

Cross site scripting

A vulnerability classified as problematic has been found in PHPGurukul Restaurant Table Booking System 1.0. Affected is an unknown function of the file index.php of the component Reservation Request Handler. The manipulation leads to cross site scripting. It is possible to launch the attack...

4CVSS6.5AI score0.00491EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2023/11/10 3:00 p.m.76 views

CVE-2023-6075

The CVE-2023-6075 issue affects PHPGurukul Restaurant Table Booking System v1.0, specifically the Reservation Request Handler’s index.php function. The vulnerability is described as a cross-site scripting (XSS) flaw caused by manipulation in an unknown function of index.php, exploitable remotely....

6.1CVSS4.9AI score0.00491EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2023/11/10 2:31 p.m.67 views

CVE-2023-6074

CVE-2023-6074 affects PHPGurukul Restaurant Table Booking System v1.0, specifically the check-status.php in the Booking Reservation Handler. The vulnerability is a SQL injection stemming from processing in that file, with remote exploitation implied. Connected sources (PT-Security PT-2023-32499, ...

9.8CVSS8.3AI score0.00697EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2023/11/10 12:00 a.m.13 views

PHPGurukul Restaurant Table Booking System Security Vulnerability

PHPGurukul Restaurant Table Booking System is a restaurant table booking system. A security vulnerability exists in version 1.0 of PHPGurukul Restaurant Table Booking System, which originates from an information disclosure vulnerability in the file booking-details.php of the component Reservation...

7.5CVSS6.2AI score0.00959EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/11/10 12:00 a.m.10 views

PHPGurukul Restaurant Table Booking System Security Vulnerability

PHPGurukul Restaurant Table Booking System is a restaurant table reservation system. A security vulnerability exists in PHPGurukul Restaurant Table Booking System version 1.0, which originates from a cross-site scripting XSS vulnerability in the file index.php of the component Reservation Request...

6.1CVSS5.8AI score0.00491EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/11/10 12:00 a.m.10 views

PHPGurukul Restaurant Table Booking System Security Vulnerability

PHPGurukul Restaurant Table Booking System is a restaurant table booking system. A security vulnerability exists in PHPGurukul Restaurant Table Booking System version 1.0, which originates from a SQL injection vulnerability in the file check-status.php of the component Booking Reservation Handler...

9.8CVSS7.9AI score0.00697EPSS
SaveExploits0References3
NVD
NVD
added 2023/11/06 8:15 a.m.25 views

CVE-2022-47428

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WpDevArt Booking calendar, Appointment Booking System allows SQL Injection.This issue affects Booking calendar, Appointment Booking System: from n/a through 3.2.7...

9.8CVSS9.8AI score0.00675EPSS
SaveExploits0References1
Rows per page
Query Builder