7973 matches found
CVE-2018-5075
CVE-2018-5075 specifies an XSS vulnerability in Online Ticket Booking, exploitable via the admin/snacks_edit.php snacks_name parameter. The available connected documents confirm the affected application path and vulnerability class (XSS) but do not provide exploit code, affected versions, remedia...
CVE-2018-5073
CVE-2018-5073 affects the Online Ticket Booking system, with a CSRF vulnerability in the admin/movieedit.php endpoint. The issue allows forged requests to be sent on behalf of an authenticated admin, potentially enabling unauthorized actions. The CVE entry lists CVSS metrics (2.0/3.0) indicating ...
CVE-2018-5076
CVE-2018-5076 is a Cross-Site Scripting (XSS) vulnerability affecting the Online Ticket Booking component of the Advanced Real Estate Script family. Multiple sources (NVD, Red Hat advisory, CNVD) describe an XSS flaw that can be exploited via the admin/newsedit.php news title parameter, enabling ...
CVE-2018-5077
Online Ticket Booking has XSS via the admin/movieedit.php moviename parameter...
CVE-2018-5073
Online Ticket Booking has CSRF via admin/movieedit.php...
CVE-2018-5078
Online Ticket Booking has XSS via the admin/eventlist.php cast parameter...
CVE-2018-5077
CVE-2018-5077 is described across multiple sources as an XSS vulnerability in Online Ticket Booking, exploitable via the admin/movieedit.php moviename parameter. The NVD entry lists a network-accessible, low-medium severity issue with CVSS v3.0 base score 4.8 (I/L, C/L) and a CVSS v2 base score 3...
CVE-2018-5072
Online Ticket Booking has XSS via the admin/sitesettings.php keyword parameter...
CVE-2018-5078
The CVE-2018-5078 entry concerns a Cross-Site Scripting (XSS) vulnerability in the Online Ticket Booking system, exploitable via the admin/eventlist.php cast parameter. Connected sources consistently describe XSS as the flaw and point to the same parameter as the vector, but there are no accompan...
assistive.flysas.com XSS vulnerability
Open Bug Bounty ID: OBB-481477 Description| Value ---|--- Affected Website:| assistive.flysas.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CVE-2017-12812
PHPJabbers Night Club Booking Software has stored XSS in the name parameter in the reservations tab...
CVE-2017-12812
PHPJabbers Night Club Booking Software has stored XSS in the name parameter in the reservations tab...
CVE-2017-12812
PHPJabbers Night Club Booking Software has stored XSS in the name parameter in the reservations tab...
Cross site scripting
PHPJabbers Night Club Booking Software has stored XSS in the name parameter in the reservations tab...
CVE-2017-12812
PHPJabbers Night Club Booking Software has stored XSS in the name parameter in the reservations tab...
CVE-2017-12812
PHPJabbers Night Club Booking Software is affected by a stored XSS in the name parameter of the reservations tab. The CNVD entry CNVD-2018-02206 describes a cross-site scripting vulnerability in this field, arising from insufficient input sanitization in the reservations name parameter. A remote ...
Joomla JomHoliday 4.0 SQL Injection Vulnerability
Exploit for php platform in category web applications Title: Joomla JomHoliday 4.0 - SQL Injection Credit: Bilal KARDADOU Vendor: http://comdev.eu URL: https://extensions.joomla.org/extensions/extension/vertical-markets/booking-a-reservations/jomholiday/ Product: 'Joomla JomHoliday 4.0' Developer...
Cross site request forgery (csrf)
PHP Scripts Mall Single Theater Booking has CSRF via admin/sitesettings.php...