CVE-2015-1000009

Open proxy in Wordpress plugin google-adsense-and-hotel-booking v1.05...

Open redirect

Open proxy in Wordpress plugin google-adsense-and-hotel-booking v1.05...

CVE-2015-1000009

Open proxy in Wordpress plugin google-adsense-and-hotel-booking v1.05...

CVE-2015-1000009

CVE-2015-1000009 affects the WordPress plugin google-adsense-and-hotel-booking version 1.05, specifically the proxy.php script. The vulnerability results in an open proxy/post proxy capability, allowing an attacker to proxy POST requests through the host site, potentially aiding attack concealmen...

Joomla com_ jomres SQL injection Vulnerability

Exploit for php platform in category web applications Exploit Title : Joomla com jomres SQL injection Vulnerability Exploit Author : xBADGIRL21 Dork : index.php?option=com jomres "propertyuid" Software link : https://www.jomres.net/files/jomresjoomlacomponentinstaller.zip Vendor Homepage :...

WordPress Appointment Schedule Booking System - Authenticated Stored XSS

The wp-appointment-schedule-booking-system WordPress plugin was affected by an Authenticated Stored XSS security vulnerability...

WordPress Appointment Schedule Booking System Plugin - XSS

Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...

Joomla! Component Event Booking component SQL injection vulnerability

Joomla! is an open source content management system CMS, the system provides RSS feeds, site search and other functions. A SQL injection vulnerability exists in Joomla! Component Event Booking version 2.10.1. The vulnerability exists because the program fails to adequately filter user-submitted...

Joomla! Component Event Booking 2.10.1 - SQL Injection

Joomla! Component Event Booking 2.10.1 - SQL Injection Exploit Title : Joomla Event Booking Component - SQL Injection Exploit Author : Persian Hack Team Homepage : http://persian-team.ir Vendor Homepage : http://extensions.joomla.org/extension/event-booking Category Webapps Tested on Win Version ...

Joomla Event Booking 2.10.1 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title : Joomla Event Booking Component - SQL Injection Exploit Author : Persian Hack Team Homepage : http://persian-team.ir Vendor Homepage : http://extensions.joomla.org/extension/event-booking Category Webapps Tested on Win Version :...

Joomla! Component Event Booking 2.10.1 - SQL Injection

Exploit Title : Joomla Event Booking Component - SQL Injection Exploit Author : Persian Hack Team Homepage : http://persian-team.ir Vendor Homepage : http://extensions.joomla.org/extension/event-booking Category Webapps Tested on Win Version : 2.10.1 Date 2016/09/25 PoC = Sql Injection : Date...

Joomla Event Booking 2.10.1 SQL Injection

Exploit Title : Joomla Event Booking Component - SQL Injection Exploit Author : Persian Hack Team Homepage : http://persian-team.ir Vendor Homepage : http://extensions.joomla.org/extension/event-booking Category Webapps Tested on Win Version : 2.10.1 Date 2016/09/25 PoC = Sql Injection : Date...

WordPress Plugin Booking Calendar SQL Injection Vulnerability

WordPress is a blogging platform developed using the PHP language that allows users to set up their own weblogs on servers that support PHP and MySQL databases.Booking Calendar is a WEB-based calendar application. A SQL injection vulnerability exists in the WordPress plugin Booking Calendar. An...

WordPress Booking Calendar Plugin <= 6.2 - Reflected Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...

WordPress Booking Calendar 6.2 SQL Injection

------------------------------------------------------------------------ SQL injection vulnerability in Booking Calendar WordPress Plugin ------------------------------------------------------------------------ Edwin Molenaar, July 2016...

Booking Calendar <= 6.2 - SQL Injection

The Booking Calendar WordPress plugin was affected by a SQL Injection security vulnerability...

Booking Calendar <= 6.2 - Reflected Cross-Site Scripting (XSS)

The Booking Calendar WordPress plugin was affected by a Reflected Cross-Site Scripting XSS security vulnerability...

WordPress Booking Calendar 6.2.1 Cross Site Scripting

------------------------------------------------------------------------ Cross-Site Scripting vulnerability in Booking Calendar WordPress Plugin ------------------------------------------------------------------------ Edwin Molenaar, July 2016...

WordPress Booking Calendar Plugin <= 6.2 - Reflected Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...

WordPress Booking Calendar plugin <= 6.2 - SQL Injection (SQLi) vulnerability

SQL Injection SQLi vulnerability discovered by ethicalhack3r in WordPress Booking Calendar plugin versions = 6.2. Solution Update the WordPress Booking Calendar plugin to the latest available version at least 6.2.1...