Lucene search
+L

7877 matches found

OSV
OSV
added 2023/11/09 11:15 p.m.11 views

CVE-2023-32501

Cross-Site Request Forgery CSRF vulnerability in E4J s.R.L. VikBooking Hotel Booking Engine & PMS plugin = 1.6.1 versions...

8.8CVSS5.8AI score0.0028EPSS
SaveExploits0References1
NVD
NVD
added 2023/11/09 11:15 p.m.28 views

CVE-2023-32501

Cross-Site Request Forgery CSRF vulnerability in E4J s.R.L. VikBooking Hotel Booking Engine & PMS plugin = 1.6.1 versions...

8.8CVSS0.0028EPSS
SaveExploits0References1
Prion
Prion
added 2023/11/09 11:15 p.m.24 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in E4J s.R.L. VikBooking Hotel Booking Engine & PMS plugin = 1.6.1 versions...

6.8CVSS7.3AI score0.0028EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/11/09 10:18 p.m.6 views

CVE-2023-32501 WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.6.1 - Cross Site Request Forgery (CSRF) vulnerability

A vulnerability in e4jvikwp VikBooking Hotel Booking Engine & PMS vikbooking.This issue affects VikBooking Hotel Booking Engine & PMS: from n/a through = 1.6.1...

4.3CVSS8AI score0.0028EPSS
SaveExploits0References1
CVE
CVE
added 2023/11/09 10:18 p.m.41 views

CVE-2023-32501

The CVE-2023-32501 entry concerns the VikBooking Hotel Booking Engine & PMS WordPress plugin (versions

8.8CVSS8.9AI score0.0028EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/11/09 12:00 a.m.7 views

WordPress Plugin VikBooking Hotel Booking Engine & PMS Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin VikBooking...

8.8CVSS6.5AI score0.0028EPSS
SaveExploits0References3
NVD
NVD
added 2023/11/06 8:15 a.m.25 views

CVE-2022-47428

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WpDevArt Booking calendar, Appointment Booking System allows SQL Injection.This issue affects Booking calendar, Appointment Booking System: from n/a through 3.2.7...

9.8CVSS9.8AI score0.00675EPSS
SaveExploits0References1
OSV
OSV
added 2023/11/06 8:15 a.m.4 views

CVE-2022-47428

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WpDevArt Booking calendar, Appointment Booking System allows SQL Injection.This issue affects Booking calendar, Appointment Booking System: from n/a through 3.2.7...

9.8CVSS5.8AI score0.00675EPSS
SaveExploits0References1
Prion
Prion
added 2023/11/06 8:15 a.m.22 views

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WpDevArt Booking calendar, Appointment Booking System allows SQL Injection.This issue affects Booking calendar, Appointment Booking System: from n/a through 3.2.7...

7.5CVSS7.8AI score0.00675EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/11/06 7:36 a.m.56 views

CVE-2022-47428

CVE-2022-47428 affects the WordPress plugin Booking calendar, Appointment Booking System (

9.8CVSS8.9AI score0.00675EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/11/06 7:36 a.m.37 views

CVE-2022-47428 WordPress Booking calendar, Appointment Booking System Plugin <= 3.2.7 is vulnerable to SQL Injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WpDevArt Booking calendar, Appointment Booking System allows SQL Injection.This issue affects Booking calendar, Appointment Booking System: from n/a through 3.2.7...

6.7CVSS10AI score0.00675EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/11/06 7:36 a.m.29 views

CVE-2022-47428 WordPress Booking calendar, Appointment Booking System plugin <= 3.2.7 - SQL Injection

A vulnerability in wpdevart Booking calendar, Appointment Booking System booking-calendar.This issue affects Booking calendar, Appointment Booking System: from n/a through = 3.2.7...

6.7CVSS8.6AI score0.00675EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/11/06 12:00 a.m.27 views

PT-2023-15305 · Unknown · Wpdevart Booking Calendar

Name of the Vulnerable Software and Affected Versions: WpDevArt Booking calendar, Appointment Booking System versions 3.2.7 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQ...

9.8CVSS9.7AI score0.00675EPSS
SaveExploits0References4
OSV
OSV
added 2023/11/02 3:15 a.m.13 views

CVE-2023-45018

Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the includes/login.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS5.8AI score0.007EPSS
SaveExploits1References2
NVD
NVD
added 2023/11/02 3:15 a.m.21 views

CVE-2023-45019

Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'category' parameter of the category.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS10AI score0.007EPSS
SaveExploits1References2
OSV
OSV
added 2023/11/02 3:15 a.m.8 views

CVE-2023-45019

Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'category' parameter of the category.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS5.8AI score0.007EPSS
SaveExploits1References2
NVD
NVD
added 2023/11/02 3:15 a.m.19 views

CVE-2023-45018

Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the includes/login.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS10AI score0.007EPSS
SaveExploits1References2
OSV
OSV
added 2023/11/02 3:15 a.m.14 views

CVE-2023-45012

Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'useremail' parameter of the businfo.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS5.9AI score0.00672EPSS
SaveExploits1References2
NVD
NVD
added 2023/11/02 3:15 a.m.17 views

CVE-2023-45012

Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'useremail' parameter of the businfo.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS10AI score0.00672EPSS
SaveExploits1References2
NVD
NVD
added 2023/11/02 3:15 a.m.32 views

CVE-2023-45015

Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'date' parameter of the businfo.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS10AI score0.007EPSS
SaveExploits1References2
Rows per page
Query Builder