CVE-2023-49989

Hotel Booking Management v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at update.php...

CVE-2022-46091

CVE-2022-46091 affects Online Flight Booking Management System v1.0, with a Cross Site Scripting (XSS) flaw in the feedback form. The vulnerability arises from a crafted payload injected into the airline parameter, enabling execution of arbitrary client-side scripts/HTML. Connected sources confir...

CVE-2023-49988

Hotel Booking Management v1.0 was discovered to contain a SQL injection vulnerability via the npss parameter at rooms.php...

CVE-2023-49988

Hotel Booking Management v1.0 is affected by a SQL injection vulnerability in rooms.php, exploitable via the npss parameter. The root cause is unsafe handling of input in npss, enabling attacker-controlled SQL execution. Documented impact includes potential confidentiality breaches (as reflected ...

CVE-2022-46091

Cross Site Scripting XSS vulnerability in the feedback form of Online Flight Booking Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the airline parameter...

WordPress Plugin Appointment Booking Calendar Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

CVE-2022-46088

Online Flight Booking Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the feedback form...

CVE-2022-46088

Online Flight Booking Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the feedback form...

CVE-2022-46088

Online Flight Booking Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the feedback form...

Cross site scripting

Online Flight Booking Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the feedback form...

CVE-2022-46088

CVE-2022-46088 affects Online Flight Booking Management System v1.0. Multiple connected sources report a cross-site scripting (XSS) vulnerability via the feedback form, caused by improper handling of user-supplied input. The descriptions consistently identify the feedback form as the entry point ...

Online Flight Booking Management System Security Vulnerability

Online Flight Booking Management System is an online booking management system by Carlo Montero, an individual developer. A security vulnerability exists in Online Flight Booking Management System v1.0, which is caused by a cross-site scripting XSS vulnerability in the feedback form...

CVE-2022-46088

Online Flight Booking Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the feedback form...

CVE-2024-2076

A vulnerability was found in CodeAstro House Rental Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file booking.php/owner.php/tenant.php. The manipulation leads to missing authentication. The attack may be launched remotely. Th...

House Rental Management System Security Vulnerability

House Rental Management System is a house rental management system by Carlo Montero Personal Developer. A security vulnerability exists in House Rental Management System version 1.0, which stems from an unknown function in booking.php/owner.php/tenant.php that results in missing authentication...

Booking for Appointments and Events Calendar – Amelia < 1.0.99 - Reflected Cross-Site Scripting

Description The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the date parameters in all versions up to, and including, 1.0.98 due to insufficient input sanitization and output escaping. This makes it possible for...

Booking Calendar < 1.3.83 - CSRF appointment scheduling

Description The plugin does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks such as adding a booking to the calendar without paying. PoC...

Bykea: Broken Access Control (IDOR) in Booking Detail and Bids Could Leads to Sensitive Information Disclosure

The report identified a vulnerability in the Bykea application's booking detail and bids endpoints that could lead to the disclosure of sensitive information. The vulnerable endpoints allowed an attacker to access the booking details, bids information, and bids configuration of other users by...

CVE-2024-23517

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Start Booking Scheduling Plugin – Online Booking for WordPress allows Stored XSS.This issue affects Scheduling Plugin – Online Booking for WordPress: from n/a through 3.5.10...

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Start Booking Scheduling Plugin – Online Booking for WordPress allows Stored XSS.This issue affects Scheduling Plugin – Online Booking for WordPress: from n/a through 3.5.10...