2057 matches found
CVE-2022-4251 Movie Ticket Booking System editBooking.php cross site scripting
A vulnerability was found in Movie Ticket Booking System and classified as problematic. Affected by this issue is some unknown functionality of the file editBooking.php. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the publ...
CVE-2022-4249 Movie Ticket Booking System POST Request cross site scripting
A vulnerability, which was classified as problematic, was found in Movie Ticket Booking System. Affected is an unknown function of the component POST Request Handler. The manipulation of the argument ORDERID leads to cross site scripting. It is possible to launch the attack remotely. The exploit...
CVE-2022-4247 Movie Ticket Booking System booking.php sql injection
A vulnerability classified as critical was found in Movie Ticket Booking System. This vulnerability affects unknown code of the file booking.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may ...
Movie Ticket Booking System 安全漏洞
Movie Ticket Booking System is a movie ticket booking system by the individual developer Aman sharma. A security vulnerability exists in Movie Ticket Booking System, which stems from a problem with some unknown processing in the file editBooking.php, where manipulation of the parameter id can lea...
CVE-2022-4251 Movie Ticket Booking System editBooking.php cross site scripting
A vulnerability was found in Movie Ticket Booking System and classified as problematic. Affected by this issue is some unknown functionality of the file editBooking.php. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the publ...
CVE-2022-4248
CVE-2022-4248 affects Movie Ticket Booking System. A vulnerability in the processing of editBooking.php allows SQL injection via the id parameter. The attack can be initiated remotely, and the exploit has been disclosed publicly. Several sources classify this as critical, but there is no public c...
PT-2022-26460 · Unknown · Movie Ticket Booking System
Name of the Vulnerable Software and Affected Versions: Movie Ticket Booking System affected versions not specified Description: A problematic issue has been found in the Movie Ticket Booking System, affecting an unknown functionality of the file booking.php. The manipulation of the id argument...
PT-2022-26453 · Unknown · Movie Ticket Booking System
Name of the Vulnerable Software and Affected Versions: Movie Ticket Booking System affected versions not specified Description: A critical issue has been found in the Movie Ticket Booking System, affecting the processing of the file editBooking.php. The manipulation of the id argument leads to SQ...
CVE-2022-4247 Movie Ticket Booking System booking.php sql injection
A vulnerability classified as critical was found in Movie Ticket Booking System. This vulnerability affects unknown code of the file booking.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may ...
CVE-2022-4250 Movie Ticket Booking System booking.php cross site scripting
A vulnerability has been found in Movie Ticket Booking System and classified as problematic. Affected by this vulnerability is an unknown functionality of the file booking.php. The manipulation of the argument id leads to cross site scripting. The attack can be launched remotely. The exploit has...
CVE-2022-4251
Movie Ticket Booking System (editBooking.php) is affected by a cross-site scripting vulnerability. The issue arises from a problem in some unknown functionality of editBooking.php, enabling remote exploitation and with exploits already disclosed publicly. The available sources do not specify affe...
CVE-2022-4248 Movie Ticket Booking System editBooking.php sql injection
A vulnerability, which was classified as critical, has been found in Movie Ticket Booking System. This issue affects some unknown processing of the file editBooking.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclose...
CVE-2022-4250 Movie Ticket Booking System booking.php cross site scripting
A vulnerability has been found in Movie Ticket Booking System and classified as problematic. Affected by this vulnerability is an unknown functionality of the file booking.php. The manipulation of the argument id leads to cross site scripting. The attack can be launched remotely. The exploit has...
CVE-2022-4248 Movie Ticket Booking System editBooking.php sql injection
A vulnerability, which was classified as critical, has been found in Movie Ticket Booking System. This issue affects some unknown processing of the file editBooking.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclose...
CVE-2022-4247
CVE-2022-4247 : The vulnerability affects the Movie Ticket Booking System, specifically the code in the file booking.php . The issue arises from manipulation of the id argument, leading to SQL injection . The attack is described as remote and publicly disclosed. Multiple connected sources reaffir...
PT-2022-20160 · Tinymce +1 · Tinymce +1
Name of the Vulnerable Software and Affected Versions: asith-eranga ISIC tour booking versions through the version published on Feb 13th 2018 Description: The issue allows attackers to upload arbitrary files via "/system/application/libs/js/tinymce/plugins/filemanager/dialog.php" and...
WordPress Plugin "Salon booking system" vulnerable to cross-site scripting
Overview WordPress Plugin "Salon booking system" contains a cross-site scripting vulnerability CWE-79. Gen Sato of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact An...
Salon Booking System < 7.9.4 - Reflected Cross-Site Scripting
The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting...
WordPress plugin Salon booking system 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...
JVN#59663854: WordPress Plugin "Salon booking system" vulnerable to cross-site scripting
WordPress Plugin "Salon booking system" contains a cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the web browser of the user who is logging in to the WordPress administrative page where the product is installed. Solution Update the plugin Update the plug...