CVE-2023-36936

Cross-Site Scripting XSS vulnerability in PHPGurukul Online Security Guards Hiring System using PHP and MySQL 1.0 allows attackers to execute arbitrary code via a crafted payload to the search booking box...

CVE-2023-36939

Cross-Site Scripting XSS vulnerability in Hostel Management System v2.1 allows an attacker to execute arbitrary code via a crafted payload to the search booking field...

CVE-2023-3564

The CVE-2023-3564 entry concerns GZ Scripts GZ Multi Hotel Booking System v1.8. The vulnerability is a Cross-Site Scripting flaw in an unknown function of /index.php, triggered by manipulating adults/children/cal_id, with remote exploitation possible. Connected sources (PT-2023-25234) provide con...

CVE-2023-3564 GZ Scripts GZ Multi Hotel Booking System index.php cross site scripting

A vulnerability was found in GZ Scripts GZ Multi Hotel Booking System 1.8. It has been classified as problematic. Affected is an unknown function of the file /index.php. The manipulation of the argument adults/children/calid leads to cross site scripting. It is possible to launch the attack...

CVE-2023-3561

The CVE-2023-3561 entry concerns GZ Scripts PHP GZ Hotel Booking Script 1.8. Affected component: /load.php. Root cause: lack of proper input handling for parameters first_name/second_name/phone/address_1/country leads to cross-site scripting. Impact: allows remote initiation of the attack; detail...

CVE-2023-3561 GZ Scripts PHP GZ Hotel Booking Script load.php cross site scripting

A vulnerability, which was classified as problematic, was found in GZ Scripts PHP GZ Hotel Booking Script 1.8. This affects an unknown part of the file /load.php. The manipulation of the argument firstname/secondname/phone/address1/country leads to cross site scripting. It is possible to initiate...

CVE-2023-3560 GZ Scripts Ticket Booking Script load.php cross site scripting

A vulnerability, which was classified as problematic, has been found in GZ Scripts Ticket Booking Script 1.8. Affected by this issue is some unknown functionality of the file /load.php. The manipulation of the argument firstname/secondname/phone/address1/country leads to cross site scripting. The...

CVE-2023-3560

CVE-2023-3560 relates to a cross-site scripting vulnerability in GZ Scripts Ticket Booking Script 1.8, specifically affecting the /load.php functionality. The root cause is improper handling of input parameters (first_name/second_name/phone/address_1/country), enabling remote attacker-controlled ...

CVE-2023-3558

CVE-2023-3558 affects GZ Scripts Event Booking Calendar version 1.8, specifically the /load.php file. The vulnerability arises from manipulation of parameters (first_name, second_name, phone, address_1, country) leading to cross-site scripting. The issue is described as exploitable remotely in mu...

PT-2023-25231 · Unknown · Gz Scripts Php Gz Hotel Booking Script

Name of the Vulnerable Software and Affected Versions: GZ Scripts PHP GZ Hotel Booking Script version 1.8 Description: A problematic issue was found in the software, affecting an unknown part of the file /load.php. The manipulation of the arguments first name, second name, phone, address 1, or...

PT-2023-25228 · Unknown · Gz Scripts Event Booking Calendar

Name of the Vulnerable Software and Affected Versions: GZ Scripts Event Booking Calendar version 1.8 Description: A problematic issue has been discovered, affecting an unknown function of the file /load.php. The manipulation of the arguments first name, second name, phone, address 1, or country...

PT-2023-25234 · Gz Scripts · Gz Multi Hotel Booking System

Name of the Vulnerable Software and Affected Versions: GZ Scripts GZ Multi Hotel Booking System version 1.8 Description: A vulnerability was found in the GZ Multi Hotel Booking System. It has been classified as problematic. The issue affects an unknown function of the file /index.php. The...

PT-2023-25230 · Unknown · Gz Scripts Ticket Booking Script

Name of the Vulnerable Software and Affected Versions: GZ Scripts Ticket Booking Script version 1.8 Description: A problematic issue has been found in the software, affecting some unknown functionality of the file /load.php. The manipulation of the arguments first name, second name, phone, addres...

CVE-2023-3543

A vulnerability was found in GZ Scripts Availability Booking Calendar PHP 1.8. It has been classified as problematic. This affects an unknown part of the file load.php of the component HTTP POST Request Handler. The manipulation of the argument cid/firstname/secondname/address1/country leads to...

CVE-2023-3544

A vulnerability was found in GZ Scripts Time Slot Booking Calendar PHP 1.8. It has been declared as problematic. This vulnerability affects unknown code of the file /load.php. The manipulation of the argument firstname/secondname/phone/address1/country leads to cross site scripting. The attack ca...

CVE-2023-3543

A vulnerability was found in GZ Scripts Availability Booking Calendar PHP 1.8. It has been classified as problematic. This affects an unknown part of the file load.php of the component HTTP POST Request Handler. The manipulation of the argument cid/firstname/secondname/address1/country leads to...

Cross site scripting

A vulnerability was found in GZ Scripts Availability Booking Calendar PHP 1.8. It has been classified as problematic. This affects an unknown part of the file load.php of the component HTTP POST Request Handler. The manipulation of the argument cid/firstname/secondname/address1/country leads to...

Cross site scripting

A vulnerability was found in GZ Scripts Time Slot Booking Calendar PHP 1.8. It has been declared as problematic. This vulnerability affects unknown code of the file /load.php. The manipulation of the argument firstname/secondname/phone/address1/country leads to cross site scripting. The attack ca...

CVE-2023-3544

CVE-2023-3544 affects GZ Scripts Time Slot Booking Calendar PHP 1.8. The vulnerability exists in an unknown portion of /load.php and is triggered by manipulating the parameters first_name, second_name, phone, address_1, or country, leading to cross-site scripting. Attacker could exploit remotely;...

CVE-2023-3544 GZ Scripts Time Slot Booking Calendar PHP load.php cross site scripting

A vulnerability was found in GZ Scripts Time Slot Booking Calendar PHP 1.8. It has been declared as problematic. This vulnerability affects unknown code of the file /load.php. The manipulation of the argument firstname/secondname/phone/address1/country leads to cross site scripting. The attack ca...