Service Booking Script Cross-Site Scripting Vulnerability

Service Booking Script is a PHP Jabbers open source service booking script. A cross-site scripting vulnerability exists in PHP Jabbers Service Booking Script version 1.0, which stems from the parameter index in the file /index.php can lead to cross-site scripting...

Availability Booking Calendar PHP Cross Site Scripting Vulnerability

Availability Booking Calendar PHP is a GZ Scripts open source availability booking calendar system. A cross-site scripting vulnerability exists in Availability Booking Calendar PHP version 5.0, which stems from the parameter sessionid in the file /index.php that causes cross-site scripting...

Availability Booking Calendar PHP Security Vulnerability

Availability Booking Calendar PHP is an open source availability booking calendar system by GZ Scripts. A security vulnerability exists in Availability Booking Calendar PHP version 5.0, which is vulnerable to user account takeover...

PT-2023-27803 · Phpjabbers · Php Jabbers Shuttle Booking

Name of the Vulnerable Software and Affected Versions: PHP Jabbers Shuttle Booking Software version 1.0 Description: A vulnerability was found in the software, classified as problematic, affecting an unknown part of the file /index.php. The manipulation leads to cross site scripting, and it is...

PT-2023-27820 · Phpjabbers · Phpjabbers Night Club Booking

Name of the Vulnerable Software and Affected Versions: PHP Jabbers Night Club Booking Software version 1.0 Description: A vulnerability was found in the software, affecting some unknown processing of the file /index.php. The manipulation of the index argument leads to cross-site scripting. The...

CVE-2023-36133

CVE-2023-36133 affects PHPJabbers Availability Booking Calendar 5.0. Descriptions across sources consistently flag a User Account Takeover via username/password changes, with CVSS v3.1 metrics indicating network access, low attack complexity, no privileges required, and high confidentiality, inte...

PT-2023-27814 · Unknown · Php Jabbers Service Booking Script

Name of the Vulnerable Software and Affected Versions: PHP Jabbers Service Booking Script version 1.0 Description: A vulnerability was found in the PHP Jabbers Service Booking Script, affecting unknown code of the file /index.php. The manipulation of the index argument leads to cross-site...

Availability Booking Calendar PHP Security Vulnerability

Availability Booking Calendar PHP is an open source availability booking calendar system by GZ Scripts. A security vulnerability exists in Availability Booking Calendar PHP version 5.0 that stems from vulnerability to incorrect access control...

PHPJabbers Shuttle Booking Software 1.0 Cross Site Scripting

Exploit Title: PHPJabbers Shuttle Booking Software 1.0 - Reflected XSS Exploit Author: CraCkEr Date: 20/07/2023 Vendor: PHPJabbers Vendor Homepage: https://www.phpjabbers.com/ Software Link: https://www.phpjabbers.com/shuttle-booking-software/ Tested on: Windows 10 Pro Impact: Manipulate the...

Taxi Booking Cross-Site Scripting Vulnerability

Taxi Booking is a PHP Jabbers open source cab booking software. A cross-site scripting vulnerability exists in PHP Jabbers Taxi Booking version 2.0, which stems from the parameter index in the file /index.php that causes cross-site scripting...

Availability Booking Calendar PHP Security Vulnerability

Availability Booking Calendar PHP is an open source availability booking calendar system by GZ Scripts. A security vulnerability exists in Availability Booking Calendar version 5.0, which stems from incorrect validation of password parameter input and vulnerability to incorrect access control...

CVE-2023-36131

CVE-2023-36131 affects PHPJabbers Availability Booking Calendar 5.0. The issue is an Incorrect Access Control due to improper input validation of the password parameter, enabling unauthorized access. CVSS 3.1 vector: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (base score 9.8). Exploitation likely over t...

PHPJabbers Rental Property Booking 2.0 Cross Site Scripting

Exploit Title: PHPJabbers Rental Property Booking 2.0 - Reflected XSS Exploit Author: CraCkEr Date: 22/07/2023 Vendor: PHPJabbers Vendor Homepage: https://www.phpjabbers.com/ Software Link: https://www.phpjabbers.com/rental-property-booking-calendar/ Tested on: Windows 10 Pro Impact: Manipulate t...

Rental Property Booking Cross-Site Scripting Vulnerability

Rental Property Booking is an open source rental property booking software by PHP Jabbers. A cross-site scripting vulnerability exists in PHP Jabbers Rental Property Booking version 2.0, which stems from the parameter index in the file /index.php that causes cross-site scripting...

CVE-2023-36132

The CVE-2023-36132 entry concerns PHP Jabbers Availability Booking Calendar 5.0 and the underlying issue is Incorrect Access Control. The available connected sources collectively identify the affected software (Availability Booking Calendar 5.0) and the root cause as improper access control, with...

CVE-2023-36133

PHPJabbers Availability Booking Calendar 5.0 is vulnerable to User Account Takeover through username/password change...

CVE-2023-4067

The Bus Ticket Booking with Seat Reservation plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'tabdate' and 'tabdater' parameters in versions up to, and including, 5.2.3 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2023-4067 Bus Ticket Booking with Seat Reservation <= 5.2.3 - Reflected Cross-Site Scripting

The Bus Ticket Booking with Seat Reservation plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'tabdate' and 'tabdater' parameters in versions up to, and including, 5.2.3 due to insufficient input sanitization and output escaping. This makes it possible for...

PT-2023-27590 · WordPress · Bus Ticket Booking With Seat Reservation

Name of the Vulnerable Software and Affected Versions: The Bus Ticket Booking with Seat Reservation plugin for WordPress versions up to, and including, 5.2.3 Description: The issue arises from insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject...

WordPress Plugin Bus Ticket Booking with Seat Reservation Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. WordPress Plugin Bus Ticket Booking with Seat...