WordPress Plugin Dharma Booking 2.38.3 - Remote File Inclusion

WordPress Plugin Dharma Booking 2.38.3 - Remote File Inclusion Exploit Title: Wordpress Dharma booking File Inclusion Date: 03/22/2016 Exploit Author: AMAR^SHG Vendor Homepage:https://wordpress.org/plugins/dharma-booking/ Software Link : https://wordpress.org/plugins/dharma-booking/ Version:...

WordPress Dharma Booking Plugin 2.38.3 - File Inclusion

WordPress Dharma Booking plugin is prone to a file inclusion vulnerability. Solution Upgrade the plugin...

WordPress Plugin Dharma Booking 2.38.3 - Remote File Inclusion

Exploit Title: Wordpress Dharma booking File Inclusion Date: 03/22/2016 Exploit Author: AMAR^SHG Vendor Homepage:https://wordpress.org/plugins/dharma-booking/ Software Link : https://wordpress.org/plugins/dharma-booking/ Version: =2.28.3 Tested on: WINDOWS/WAMP...

Zomato: Persistent XSS on Reservation / Booking Page

Hi, Its a persistent xss issue on booking or reservation page. I am going to add the video which is demonstrate the bug. Have a nice work! Here is video: https://www.youtube.com/watch?v=NBDBnKorF6o...

WordPress预订日历联系表单1.1.24 多个漏洞 (XSS, CSRF)

No description provided by source...

WordPress Booking Calendar Contact Form<=1.1.24 - cpabc_appointments.php文件addslashes SQL Injection V

No description provided by source...

Wordpress Booking Calendar Contact Form Plugin <=1.1.23 - Shortcode SQL注入漏洞

No description provided by source...

WordPress appointment-booking-calendar <=1.1.23 - Unauthenticated SQL injection

No description provided by source...

WordPress Booking Calendar Contact Form 1.0.23 Plugin - Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title: Wordpress booking calendar contact form =v1.0.23 - Unauthenticated blind SQL injection Date: 2016-02-08 Google Dork: Index of /wp-content/plugins/booking-calendar-contact-form Exploit Author: Joaquin Ramirez Martinez i0...

WordPress Booking Calendar Contact Form 1.0.23 Shortcode SQL Injection

Exploit Title: Wordpress booking calendar contact form =v1.0.23 - Unauthenticated blind SQL injection Date: 2016-02-08 Google Dork: Index of /wp-content/plugins/booking-calendar-contact-form Exploit Author: Joaquin Ramirez Martinez i0 SEC-LABORATORY Vendor Homepage: http://wordpress.dwbooster.com...

WordPress Booking Calendar Contact Form Plugin 1.0.23 - Multiple Vulnerabilities

This plugin is prone to multiple vulnerabilities, such as unauthenticated blind SQL injection, privilege escalation and stored XSS vulnerabilities. Solution Upgrade the plugin...

WordPress Plugin Booking Calendar Contact Form 1.0.23 - Multiple Vulnerabilities

WordPress Plugin Booking Calendar Contact Form 1.0.23 - Multiple Vulnerabilities Exploit Title: Wordpress booking calendar contact form =v1.0.23 - Unauthenticated blind SQL injection Date: 2016-02-08 Google Dork: Index of /wp-content/plugins/booking-calendar-contact-form Exploit Author: Joaquin...

WordPress Booking Calendar Contact Form 1.0.23 CSRF / XSS

Exploit Title: Wordpress booking calendar contact form =v1.0.23 - Privilege escalation / stored XSS vulnerabilities Date: 2016-02-08 Google Dork: Index of /wp-content/plugins/booking-calendar-contact-form Exploit Author: Joaquin Ramirez Martinez i0 SEC-LABORATORY Vendor Homepage:...

WordPress Booking Calendar Contact Form 1.0.23 Blind SQL Injection

Exploit Title: Wordpress booking calendar contact form =v1.0.23 - Unauthenticated blind SQL injection Date: 2016-02-08 Google Dork: Index of /wp-content/plugins/booking-calendar-contact-form Exploit Author: Joaquin Ramirez Martinez i0 SEC-LABORATORY Vendor Homepage: http://wordpress.dwbooster.com...

WordPress Plugin Booking Calendar Contact Form 1.0.23 - Multiple Vulnerabilities

Exploit Title: Wordpress booking calendar contact form =v1.0.23 - Unauthenticated blind SQL injection Date: 2016-02-08 Google Dork: Index of /wp-content/plugins/booking-calendar-contact-form Exploit Author: Joaquin Ramirez Martinez i0 SEC-LABORATORY Vendor Homepage: http://wordpress.dwbooster.com...

WordPress Appointment Booking Calendar 1.1.24 Escalation / XSS

Exploit Title: WordPress appointment-booking-calendar =1.1.24 - Privilege escalation Managing calendars & Persistent XSS Date: 2016-01-28 Google Dork: Index of /wordpress/wp-content/plugins/appointment-booking-calendar/ Exploit Author: Joaquin Ramirez Martinez i0 security-lab Software Link:...

WordPress Appointment Booking Calendar 1.1.24 SQL Injection

Exploit Title: WordPress appointment-booking-calendar =1.1.24 - SQL injection through ´addslashes´ wordpress ´wpmagicquotes´ function Date: 2016-01-28 Google Dork: Index of /wordpress/wp-content/plugins/appointment-booking-calendar/ Exploit Author: Joaquin Ramirez Martinez now i0 security-lab...

WordPress Plugin Booking Calendar Contact Form 1.1.24 - addslashes SQL Injection

WordPress Plugin Booking Calendar Contact Form 1.1.24 - addslashes SQL Injection Exploit Title: WordPress appointment-booking-calendar =1.1.24 - SQL injection through ´addslashes´ wordpress ´wpmagicquotes´ function Date: 2016-01-28 Google Dork: Index of...

WordPress Booking Calendar Contact Form 1.1.24 Plugin - Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title: WordPress appointment-booking-calendar =1.1.24 - Privilege escalation Managing calendars & Persistent XSS Date: 2016-01-28 Google Dork: Index of /wordpress/wp-content/plugins/appointment-booking-calendar/ Exploit Author: Joaquin...

WordPress Booking Calendar Contact Form Plugin 1.1.24 - Multiple Vulnerabilities

This plugin is prone to persistent XSS vulnerabilities that appear in the administration page. Solution Upgrade the plugin...