7970 matches found
Why we shouldnât use sequential booking references
I travel a lot with work. In the last 6 months there have only be 2 weeks where I havenât been to Heathrow airport. Heathrow isnât the easiest journey by public transport for me as the PTP HQ is in a field in north Bucks. Hence, I usually end driving to the airport. Iâve been to Heathrow twice th...
WordPress Travel Booking Theme <= 2.7 - Reflected & Stored Cross-Site Scripting XSS vulnerability
Reflected & Stored Cross-Site Scripting XSS vulnerability found by QUIXSS in WordPress Traveler - Travel Booking Theme versions = 2.7.1. Solution 11 June 2019 - we were unable to find a fixed version...
Multiple vulnerabilities in WordPress Plugin "Online Lesson Booking"
Overview WordPress Plugin "Online Lesson Booking" provided by SUKIMALAB.COM contains multiple vulnerabilities listed below. Stored cross-site scripting vulnerability CWE-79 - CVE-2019-5972 Cross-site request forgery vulnerability CWE-352 - CVE-2019-5973 Natsumi Matsuoka of Cryptography...
Online Lesson Booking <= 0.8.6 - CSRF & XSS
The Online Lesson Booking WordPress plugin was affected by a CSRF & XSS security vulnerability...
WordPress Online Lesson Booking Plugin Cross-Site Request Forgery Vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.Online Lesson Booking Plugin is an online booking plugin used in it. A cross-site request forgery vulnerability exists in...
JVN#96988995: Multiple vulnerabilities in WordPress Plugin "Online Lesson Booking"
WordPress Plugin "Online Lesson Booking" provided by SUKIMALAB.COM contains multiple vulnerabilities listed below. Stored cross-site scripting vulnerability CWE-79 - CVE-2019-5972 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N| Base Score: 6.1 CVSS v2|...
WordPress Online Lesson Booking Plugin Cross-Site Scripting Vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.Online Lesson Booking Plugin is an online booking plugin used in it. A cross-site scripting vulnerability exists in WordPres...
PHP Scripts Mall API Based Travel Booking Cross Site Scripting Vulnerability
PHP Scripts Mall API Based Travel Booking is an online travel booking system script by PHP Scripts Mall India. A cross-site scripting vulnerability exists in PHP Scripts Mall API Based Travel Booking version 3.4.7, which can be exploited by an attacker to execute client-side code...
CVE-2019-7554
An issue was discovered in PHP Scripts Mall API Based Travel Booking 3.4.7. There is Reflected XSS via the flight-results.php d2 parameter...
CVE-2019-7554
An issue was discovered in PHP Scripts Mall API Based Travel Booking 3.4.7. There is Reflected XSS via the flight-results.php d2 parameter...
Cross site scripting
An issue was discovered in PHP Scripts Mall API Based Travel Booking 3.4.7. There is Reflected XSS via the flight-results.php d2 parameter...
CVE-2019-7554
An issue was discovered in PHP Scripts Mall API Based Travel Booking 3.4.7. There is Reflected XSS via the flight-results.php d2 parameter...
CVE-2019-7554
The vulnerability CVE-2019-7554 affects PHP Scripts Mall API Based Travel Booking 3.4.7. It is a reflected cross-site scripting (XSS) flaw exploitable via the flight-results.php d2 parameter, which can cause client-side script execution. The issue stems from input reflected back to the user; expl...
WordPress Event Management Tickets Booking plugin <= 1.0.5 - Stored Cross-Site Scripting (XSS) vulnerability
Stored Cross-Site Scripting XSS vulnerability found by Admavidhya N in WordPress Event Management Tickets Booking plugin versions = 1.0.5. Solution Update the WordPress Event Management Tickets Booking plugin to the latest available version at least 1.0.6...
Event Management Tickets Booking By Event Monster <= 1.0.5 - Stored XSS
The Event Management Tickets Booking By Event Monster WordPress plugin was affected by a Stored XSS security vulnerability...
WordPress WP Booking System <= 1.5.1.1 - CSRF vulnerability to Authenticated SQL Injection vulnerability
CSRF vulnerability to Authenticated SQL Injection vulnerability possible in WordPress WP Booking System versions = 1.5.1.1 found by Magnus K. Stubman. Solution Update the WordPress WP Booking System to the latest available version at least 1.5.2...
WordPress WP Booking System Plugin < 1.5.2 CSRF Vulnerability
The WordPress plugin Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the...
WP Booking System <= 1.5.1.1 - CSRF to Authenticated SQL Injection
According to the original researcher, no CSRF nonces were present and therefore could be exploited by chaining with the CSRF issue...
CVE-2019-12239
The WP Booking System plugin 1.5.1 for WordPress has no CSRF protection, which allows attackers to reach certain SQL injection issues that require administrative access...
CVE-2019-12239
The CVE-2019-12239 entry concerns the WordPress WP Booking System plugin (version 1.5.1) with a lack of CSRF protection, which allows reaching SQL injection issues that require administrative access. Connected documents confirm this vulnerability and its remediation guidance, e.g., Patchstack and...