Lucene search
+L

7849 matches found

Cvelist
Cvelist
added 2025/05/07 2:19 p.m.22 views

CVE-2025-47448 WordPress WP Hotel Booking plugin <= 2.1.9 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in ThimPress WP Hotel Booking wp-hotel-booking allows Cross Site Request Forgery.This issue affects WP Hotel Booking: from n/a through = 2.1.9...

4.3CVSS0.00158EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/05/07 12:33 p.m.14 views

WordPress Hotel Booking plugin <= 3.6 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by muhammad yudha in WordPress Plugin Hotel Booking versions = 3.6...

7.5CVSS8.2AI score0.00716EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
added 2025/05/07 4:12 a.m.29 views

CVE-2025-4263

A vulnerability was found in PHPGurukul Online DJ Booking Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/booking-search.php. The manipulation of the argument searchdata leads to sql injection. The attack may be initiated remotel...

9.8CVSS7.7AI score0.00488EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/05/07 12:00 a.m.5 views

WordPress plugin WP Hotel Booking 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

4.3CVSS6AI score0.00158EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/05/07 12:00 a.m.10 views

WordPress plugin Beds24 Online Booking 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability exis...

6.5CVSS6.7AI score0.00245EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/05/07 12:00 a.m.15 views

PT-2025-20123 · Unknown · Nicdark Hotel Booking

Name of the Vulnerable Software and Affected Versions: nicdark Hotel Booking versions n/a through 3.6 Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which allows PHP Local File Inclusion...

7.5CVSS8.1AI score0.00716EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/05/07 12:00 a.m.11 views

PT-2025-20115 · Unknown · Beds24 Online Booking

Name of the Vulnerable Software and Affected Versions: Beds24 Online Booking versions n/a through 2.0.29 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...

6.5CVSS6.7AI score0.00245EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/05/07 12:00 a.m.10 views

WordPress plugin Hotel Booking 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

7.5CVSS7.8AI score0.00716EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/05/07 12:00 a.m.5 views

CVE-2025-29448

Booking logic flaw in Easy!Appointments v1.5.1 allows unauthenticated attackers to create appointments with excessively long durations, causing a denial of service by blocking all future booking availability...

7.4AI score0.00556EPSS
SaveExploits1References1
OSV
OSV
added 2025/05/07 12:00 a.m.10 views

CVE-2025-29448

Booking logic flaw in Easy!Appointments v1.5.1 allows unauthenticated attackers to create appointments with excessively long durations, causing a denial of service by blocking all future booking availability...

7.5CVSS5.9AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/05/07 12:00 a.m.7 views

PT-2025-20084 · WordPress · Thimpress Wp Hotel Booking

Name of the Vulnerable Software and Affected Versions: ThimPress WP Hotel Booking versions n/a through 2.1.9 Description: A Cross-Site Request Forgery CSRF issue affects ThimPress WP Hotel Booking, allowing unauthorized actions to be performed on behalf of a user. Recommendations: For versions n/...

4.3CVSS5.5AI score0.00158EPSS
SaveExploits0References3
NVD
NVD
added 2025/05/05 4:16 a.m.24 views

CVE-2025-4263

A vulnerability was found in PHPGurukul Online DJ Booking Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/booking-search.php. The manipulation of the argument searchdata leads to sql injection. The attack may be initiated remotel...

9.8CVSS0.00488EPSS
SaveExploits1References5
OSV
OSV
added 2025/05/05 4:16 a.m.8 views

CVE-2025-4263

A vulnerability was found in PHPGurukul Online DJ Booking Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/booking-search.php. The manipulation of the argument searchdata leads to sql injection. The attack may be initiated remotel...

9.8CVSS5.8AI score0.00488EPSS
SaveExploits1References5
OSV
OSV
added 2025/05/05 4:16 a.m.16 views

CVE-2025-4262

A vulnerability was found in PHPGurukul Online DJ Booking Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/user-search.php. The manipulation of the argument searchdata leads to sql injection. The attack can be initiated remotely...

9.8CVSS5.8AI score0.00488EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/05/05 4:00 a.m.14 views

CVE-2025-4263 PHPGurukul Online DJ Booking Management System booking-search.php sql injection

A vulnerability was found in PHPGurukul Online DJ Booking Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/booking-search.php. The manipulation of the argument searchdata leads to sql injection. The attack may be initiated remotel...

7.5CVSS7.3AI score0.00488EPSS
SaveExploits1References5
CVE
CVE
added 2025/05/05 4:00 a.m.68 views

CVE-2025-4263

The CVE-2025-4263 entry concerns PHPGurukul Online DJ Booking Management System 1.0. The vulnerability is an SQL injection in the /admin/booking-search.php endpoint caused by manipulating the searchdata parameter. It is remote in nature, with multiple sources noting public disclosure of the explo...

9.8CVSS7.6AI score0.00488EPSS
SaveExploits1References5Affected Software1
CVE
CVE
added 2025/05/05 3:31 a.m.67 views

CVE-2025-4262

PHPGurukul Online DJ Booking Management System 1.0 is affected by a SQL injection in /admin/user-search.php caused by unsafely handling the searchdata parameter. The issue can be exploited remotely and has been publicly disclosed; multiple sources corroborate exploitation potential. Remediation g...

9.8CVSS7.8AI score0.00488EPSS
SaveExploits1References5Affected Software1
CNNVD
CNNVD
added 2025/05/05 12:00 a.m.11 views

PHPGurukul Online DJ Booking Management System 注入漏洞

PHPGurukul Online DJ Booking Management System is an online DJ booking management system from PHPGurukul. An injection vulnerability exists in version 1.0 of the PHPGurukul Online DJ Booking Management System, which stems from improper handling of the searchdata parameter in the file...

9.8CVSS7.8AI score0.00488EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/05/05 12:00 a.m.8 views

PHPGurukul Online DJ Booking Management System 注入漏洞

PHPGurukul Online DJ Booking Management System is an online DJ booking management system from PHPGurukul. An injection vulnerability exists in version 1.0 of the PHPGurukul Online DJ Booking Management System, which stems from improper handling of the searchdata parameter in the file...

9.8CVSS7.8AI score0.00488EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2025/05/05 12:00 a.m.11 views

PT-2025-19337 · Unknown · Phpgurukul Online Dj Booking Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online DJ Booking Management System version 1.0 Description: A critical vulnerability was found in the PHPGurukul Online DJ Booking Management System. The issue affects the file /admin/user-search.php, where the manipulation of the...

9.8CVSS7.4AI score0.00488EPSS
SaveExploits1References12
Rows per page
Query Builder