2057 matches found
CVE-2023-45015
CVE-2023-45015 relates to the Online Bus Booking System v1.0, which is vulnerable to multiple unauthenticated SQL injection flaws. The root cause, as stated across sources, is that the date parameter in the bus_info.php resource is not properly validated or filtered before being sent to the datab...
CVE-2023-45014
Online Bus Booking System (version 1.0) is affected by unauthenticated SQL injection via the bus info.php bus id parameter that is not validated before sending to the database. This vulnerability could allow an attacker to manipulate queries and access or alter data. The report from PT-Security c...
CVE-2023-45012
The CVE-2023-45012 entry concerns Online Bus Booking System v1.0, with a vulnerable component in bus_info.php where the user_email parameter is not properly validated, allowing unauthenticated SQL injection. The issue is described as multiple unauthenticated SQL injection vulnerabilities, with CV...
CVE-2023-45012 Online Bus Booking System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'useremail' parameter of the businfo.php resource does not validate the characters received and they are sent unfiltered to the database...
CVE-2023-45012 Online Bus Booking System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'useremail' parameter of the businfo.php resource does not validate the characters received and they are sent unfiltered to the database...
PT-2023-29357 · Unknown · Online Bus Booking System
Name of the Vulnerable Software and Affected Versions: Online Bus Booking System version 1.0 Description: The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. Specifically, the source parameter of the "search.php" resource does not validate the characters received and they a...
Online Bus Booking System SQL Injection Vulnerability
Online Bus Booking System is an online bus booking system. A SQL injection vulnerability exists in Online Bus Booking System v1.0, which is caused by insufficient filtering of the useremail parameter on the businfo.php page, resulting in a SQL injection vulnerability...
Number withdrawn
Online Bus Booking System is an online bus booking system. This CVE number has been withdrawn...
Number withdrawn
Online Bus Booking System is an online bus booking system. This CVE number has been withdrawn...
PT-2023-29356 · Unknown · Online Bus Booking System
Name of the Vulnerable Software and Affected Versions: Online Bus Booking System version 1.0 Description: The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. Specifically, the date parameter of the "bus info.php" resource does not validate the characters received, and they...
Online Bus Booking System SQL Injection Vulnerability
Online Bus Booking System is an online bus booking system. A SQL injection vulnerability exists in Online Bus Booking System v1.0, which is caused by the category parameter of the category.php page not being sufficiently filtered, resulting in an SQL injection vulnerability...
Online Bus Booking System SQL Injection Vulnerability
Online Bus Booking System is an online bus booking system. A SQL injection vulnerability exists in Online Bus Booking System v1.0, which originates from the date parameter of the businfo.php page not being sufficiently filtered, resulting in a SQL injection vulnerability...
CVE-2023-45270
Cross-Site Request Forgery CSRF vulnerability in PINPOINT.WORLD Pinpoint Booking System plugin = 2.9.9.4.0 versions...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in PINPOINT.WORLD Pinpoint Booking System plugin = 2.9.9.4.0 versions...
CVE-2023-45270
CVE-2023-45270 is a CSRF vulnerability in the WordPress Pinpoint Booking System plugin, affected versions
CVE-2023-45270 WordPress Pinpoint Booking System Plugin <= 2.9.9.4.0 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in PINPOINT.WORLD Pinpoint Booking System plugin = 2.9.9.4.0 versions...
CVE-2023-45270 WordPress Pinpoint Booking System Plugin <= 2.9.9.4.0 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in PINPOINT.WORLD Pinpoint Booking System plugin = 2.9.9.4.0 versions...
PT-2023-29476 · WordPress · Pinpoint Booking System
Name of the Vulnerable Software and Affected Versions: Pinpoint Booking System plugin versions = 2.9.9.4.0 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing unintended actions on the web...
Wordpress Plugin Pinpoint Booking System - #1 WordPress Booking Plugin Cross-Site Request Forgery Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. Wordpress Plugin Pinpoint Booking System - ...