CVE-2022-4251 Movie Ticket Booking System editBooking.php cross site scripting

A vulnerability was found in Movie Ticket Booking System and classified as problematic. Affected by this issue is some unknown functionality of the file editBooking.php. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the publ...

CVE-2022-4248

CVE-2022-4248 affects Movie Ticket Booking System. A vulnerability in the processing of editBooking.php allows SQL injection via the id parameter. The attack can be initiated remotely, and the exploit has been disclosed publicly. Several sources classify this as critical, but there is no public c...

PT-2022-26451 · Unknown · Movie Ticket Booking System

Name of the Vulnerable Software and Affected Versions: Movie Ticket Booking System affected versions not specified Description: A critical issue was found in the Movie Ticket Booking System, affecting the file booking.php. The manipulation of the id argument leads to SQL injection. The attack can...

CVE-2022-4251

Movie Ticket Booking System (editBooking.php) is affected by a cross-site scripting vulnerability. The issue arises from a problem in some unknown functionality of editBooking.php, enabling remote exploitation and with exploits already disclosed publicly. The available sources do not specify affe...

CVE-2022-28607

An issue was discovered in asith-eranga ISIC tour booking through version published on Feb 13th 2018, allows attackers to gain sensitive information via the action parameter to /system/user/modules/modusers/controller.php...

ISIC 安全漏洞

ISIC is a web backend for asith-eranga individual developers. A security vulnerability exists in ISIC tour booking that stems from allowing an attacker to obtain sensitive information via the action parameter in /system/user/modules/modusers/controller.php...

ISIC SQL注入漏洞

ISIC is a website backend by asith-eranga individual developer. A security vulnerability exists in ISIC tour booking that stems from the presence of SQL injection, which allows attackers to execute arbitrary commands via the username parameter in /system/user/modules/modusers/controller.php...

CVE-2022-30528

SQL Injection vulnerability in asith-eranga ISIC tour booking through version published on Feb 13th 2018, allows attackers to execute arbitrary commands via the username parameter to /system/user/modules/modusers/controller.php...

CVE-2022-4250 Movie Ticket Booking System booking.php cross site scripting

A vulnerability has been found in Movie Ticket Booking System and classified as problematic. Affected by this vulnerability is an unknown functionality of the file booking.php. The manipulation of the argument id leads to cross site scripting. The attack can be launched remotely. The exploit has...

CVE-2022-4248 Movie Ticket Booking System editBooking.php sql injection

A vulnerability, which was classified as critical, has been found in Movie Ticket Booking System. This issue affects some unknown processing of the file editBooking.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclose...

CVE-2022-4247

CVE-2022-4247 : The vulnerability affects the Movie Ticket Booking System, specifically the code in the file booking.php . The issue arises from manipulation of the id argument, leading to SQL injection . The attack is described as remote and publicly disclosed. Multiple connected sources reaffir...

CVE-2022-4248 Movie Ticket Booking System editBooking.php sql injection

A vulnerability, which was classified as critical, has been found in Movie Ticket Booking System. This issue affects some unknown processing of the file editBooking.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclose...

WordPress Appointment Hour Booking plugin suffers from CSV injection vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A CSV injection vulnerabili...

WordPress Appointment Hour Booking plugin iFrame injection vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An iFrame injection...

CVE-2022-4036

The Appointment Hour Booking plugin for WordPress is vulnerable to CAPTCHA bypass in versions up to, and including, 1.3.72. This is due to the use of insufficiently strong hashing algorithm on the CAPTCHA secret that is also displayed to the user via a cookie...

CVE-2022-4034

The Appointment Hour Booking Plugin for WordPress is vulnerable to CSV Injection in versions up to, and including, 1.3.72. This makes it possible for unauthenticated attackers to embed untrusted input into content during booking creation that may be exported as a CSV file when a site's...

CVE-2022-4035

The Appointment Hour Booking plugin for WordPress is vulnerable to iFrame Injection via the ‘email’ or general field parameters in versions up to, and including, 1.3.72 due to insufficient input sanitization and output escaping that makes injecting iFrame tags possible. This makes it possible for...

Input validation

The Appointment Hour Booking plugin for WordPress is vulnerable to iFrame Injection via the ‘email’ or general field parameters in versions up to, and including, 1.3.72 due to insufficient input sanitization and output escaping that makes injecting iFrame tags possible. This makes it possible for...

Input validation

The Appointment Hour Booking Plugin for WordPress is vulnerable to CSV Injection in versions up to, and including, 1.3.72. This makes it possible for unauthenticated attackers to embed untrusted input into content during booking creation that may be exported as a CSV file when a site's...

CVE-2022-4036 Appointment Hour Booking <= 1.3.72 - CAPTCHA Bypass

The Appointment Hour Booking plugin for WordPress is vulnerable to CAPTCHA bypass in versions up to, and including, 1.3.72. This is due to the use of insufficiently strong hashing algorithm on the CAPTCHA secret that is also displayed to the user via a cookie...