CVE-2023-5303

CVE-2023-5303 affects Online Banquet Booking System 1.0, specifically the Account Detail Handler’s /view-booking-detail.php. The vulnerability stems from manipulation of the username parameter, enabling cross-site scripting (XSS). The issue is exploitable remotely and can impact confidentiality a...

Online Banquet Booking System Cross-Site Scripting Vulnerability

Online Banquet Booking System is an online banquet booking system. A cross-site scripting vulnerability exists in Online Banquet Booking System version 1.0, which stems from an incorrect manipulation of the parameter message that can lead to cross-site scripting...

Online Banquet Booking System Cross-Site Scripting Vulnerability

Online Banquet Booking System is an online banquet booking system. A cross-site scripting vulnerability exists in Online Banquet Booking System version 1.0, which stems from an incorrect manipulation of the parameter message that can lead to cross-site scripting...

PT-2023-32025 · Unknown · Online Banquet Booking System

Name of the Vulnerable Software and Affected Versions: Online Banquet Booking System version 1.0 Description: A vulnerability was found in the Online Banquet Booking System, affecting some unknown functionality of the file /mail.php of the component Contact Us Page. The manipulation of the messag...

Online Banquet Booking System Cross-Site Scripting Vulnerability

Online Banquet Booking System is an online banquet booking system. A cross-site scripting vulnerability exists in Online Banquet Booking System version 1.0, which stems from an incorrect operation of the parameter username that can lead to cross-site scripting...

CVE-2023-44174

Online Movie Ticket Booking System v1.0 is vulnerable to an authenticated Stored Cross-Site Scripting vulnerability...

CVE-2023-44163 Online Movie Ticket Booking System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

The 'search' parameter of the processsearch.php resource does not validate the characters received and they are sent unfiltered to the database...

CVE-2023-44173

Online Movie Ticket Booking System v1.0 is vulnerable to an authenticated Reflected Cross-Site Scripting vulnerability...

CVE-2023-44174 Online Movie Ticket Booking System v1.0 - Stored Cross-Site Scripting (XSS)

Online Movie Ticket Booking System v1.0 is vulnerable to an authenticated Stored Cross-Site Scripting vulnerability...

CVE-2023-44174

CVE-2023-44174 affects the Online Movie Ticket Booking System v1.0. The vulnerability is an authenticated Stored Cross-Site Scripting (XSS) in the web application’s input handling, allowing malicious scripts to be stored and executed in the context of other authenticated users. According to the a...

CVE-2023-44173 Online Movie Ticket Booking System v1.0 - Reflected Cross-Site Scripting (XSS)

Online Movie Ticket Booking System v1.0 is vulnerable to an authenticated Reflected Cross-Site Scripting vulnerability...

PT-2023-29145 · Unknown · Online Movie Ticket Booking System

Name of the Vulnerable Software and Affected Versions: Online Movie Ticket Booking System version 1.0 Description: The Online Movie Ticket Booking System is affected by an authenticated Stored Cross-Site Scripting issue. This allows attackers to inject malicious scripts into the system, potential...

CVE-2023-39424

A vulnerability in RDPngFileUpload.dll, as used in the IRM Next Generation booking system, allows a remote attacker to upload arbitrary content such as a web shell component to the SQL database and execute it with SYSTEM privileges. This vulnerability requires authentication to be exploited but c...

Cinema Booking System 1.0 Cross Site Scripting Vulnerability

Title: Cinema Booking System-1.0 XSS-Reflected Author: nu11secur1ty Vendor: https://www.phpjabbers.com/ Software: https://www.phpjabbers.com/car-rental-script/ Reference: https://portswigger.net/web-security/sql-injection Description: The name of an arbitrarily supplied URL parameter is copied in...

CVE-2023-40760

User enumeration is found in PHP Jabbers Hotel Booking System v4.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users...

CVE-2023-40760

User enumeration is found in PHP Jabbers Hotel Booking System v4.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users...

Design/Logic Flaw

User enumeration is found in PHP Jabbers Hotel Booking System v4.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users...

Hotel Booking System 安全漏洞

Hotel Booking System is a hotel booking system. A security vulnerability exists in PHPJabbers Hotel Booking System version v4.0, which stems from a user enumeration vulnerability during password reset...

CVE-2023-40760

PHP Jabbers Hotel Booking System v4.0 is affected by a user enumeration vulnerability observed during password recovery, where message differences can reveal whether a username exists, enabling brute-force attempts with valid accounts. The issue is described across multiple sources as a user enum...

PT-2023-27625 · Phpjabbers · Phpjabbers Hotel Booking System

Name of the Vulnerable Software and Affected Versions: PHP Jabbers Hotel Booking System version 4.0 Description: The issue is related to user enumeration, which occurs during the password recovery process. A difference in messages could allow an attacker to determine if a user is valid or not,...