Lucene search
+L

7974 matches found

zdt
zdt
added 2017/12/20 12:00 a.m.54 views

WordPress Booking Calendar 7.0 / 7.1 SQL Injection / Local File Inclusion Vulnerabilities

WordPress Booking Calendar plugin versions 7.1, 7.0, and below suffer from remote SQL injection and local file inclusion vulnerabilities. Advisory Title: WordPress Booking Calendar Plugin Multiple Vulnerabilities Advisory URL: http://www.defensecode.com/advisories.php Software: WordPress Booking...

8AI score
SaveExploits0
CNVD
CNVD
added 2017/12/20 12:00 a.m.9 views

Bus Booking Script SQL Injection Vulnerability

Bus Booking Script is an online bus booking management system based on PHP and MySQL. A SQL injection vulnerability exists in Bus Booking Script version 1.0. The vulnerability can be exploited to inject SQL commands by sending the 'txtname' parameter to the admin/index.php file...

9.8CVSS8.4AI score0.0305EPSS
SaveExploits5References1
Patchstack
Patchstack
added 2017/12/20 12:00 a.m.15 views

WordPress Booking Calendar – Clockwork SMS plugin <=1.0.5 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability found by Elias Dimopoulos in WordPress Booking Calendar – Clockwork SMS plugin versions =1.0.5. Solution Update the WordPress Booking Calendar – Clockwork SMS plugin to the latest available version at least 1.1.0...

2.6AI score
SaveExploits0References1Affected Software1
OSV
OSV
added 2017/12/18 9:29 a.m.9 views

CVE-2017-17645

Bus Booking Script 1.0 has SQL Injection via the txtname parameter to admin/index.php...

9.8CVSS5.8AI score0.0305EPSS
SaveExploits5References2
Prion
Prion
added 2017/12/18 9:29 a.m.18 views

Sql injection

Bus Booking Script 1.0 has SQL Injection via the txtname parameter to admin/index.php...

7.5CVSS9.8AI score0.0305EPSS
SaveExploits5References2Affected Software1
NVD
NVD
added 2017/12/18 9:29 a.m.29 views

CVE-2017-17645

Bus Booking Script 1.0 has SQL Injection via the txtname parameter to admin/index.php...

9.8CVSS9.9AI score0.0305EPSS
SaveExploits5References2
Cvelist
Cvelist
added 2017/12/18 9:00 a.m.32 views

CVE-2017-17645

Bus Booking Script 1.0 has SQL Injection via the txtname parameter to admin/index.php...

9.9AI score0.0305EPSS
SaveExploits5References2
CVE
CVE
added 2017/12/18 9:00 a.m.69 views

CVE-2017-17645

CVE-2017-17645 affects Bus Booking Script 1.0. The vulnerability is a SQL Injection via the txtname parameter in admin/index.php, caused by unsanitized input in a PHP/MySQL-based web app. Public references (NVD, CNVD, CVE records) describe SQL injection as the issue, with in-the-wild PoCs/exploit...

9.8CVSS9.8AI score0.0305EPSS
SaveExploits5References2Affected Software1
CNVD
CNVD
added 2017/12/15 12:00 a.m.12 views

PHP Scripts Mall Single Theater Booking Script SQL Injection Vulnerability

PHP Scripts Mall Single Theater Booking Script is a PHP and MySQL based online theater booking system script by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Single Theater Booking Script version 3.2.1. A remote attacker can exploit this vulnerability by sending...

9.8CVSS8.2AI score0.02204EPSS
SaveExploits2References1
CNVD
CNVD
added 2017/12/15 12:00 a.m.12 views

PHP Scripts Mall Entrepreneur Bus Booking Script SQL Injection Vulnerability

PHP Scripts Mall Entrepreneur Bus Booking Script is a PHP based online bus booking management system from PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Entrepreneur Bus Booking Script version 3.0.4. The vulnerability can be exploited by a remote attacker to inje...

9.8CVSS8.4AI score0.0305EPSS
SaveExploits2References1
CNVD
CNVD
added 2017/12/15 12:00 a.m.9 views

PHP Scripts Mall Responsive Events And Movie Ticket Booking Script SQL Injection Vulnerability

PHP Scripts Mall Responsive Events And Movie Ticket Booking Script is a PHP based online movie ticket booking script by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Responsive Events And Movie Ticket Booking Script version 3.2.1. The vulnerability can be...

9.8CVSS8.4AI score0.02204EPSS
SaveExploits2References1
CNVD
CNVD
added 2017/12/15 12:00 a.m.6 views

PHP Scripts Mall Beauty Parlour Booking Script SQL Injection Vulnerability

PHP Scripts Mall Beauty Parlour Booking Script is a set of PHP based booking scripts for beauty parlor management by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Beauty Parlour Booking Script version 1.0. A remote attacker can exploit the vulnerability by sendi...

9.8CVSS8.2AI score0.0305EPSS
SaveExploits2References1
CNVD
CNVD
added 2017/12/15 12:00 a.m.9 views

PHP Scripts Mall Multiplex Movie Theater Booking Script SQL Injection Vulnerability

PHP Scripts Mall Multiplex Movie Theater Booking Script is a PHP based online theater seat booking script by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Multiplex Movie Theater Booking Script version 3.1.5. A remote attacker can inject SQL into the Multiplex...

9.8CVSS8.3AI score0.02204EPSS
SaveExploits2References1
CNVD
CNVD
added 2017/12/15 12:00 a.m.9 views

PHP Scripts Mall Cab Booking Script SQL Injection Vulnerability

PHP Scripts Mall Cab Booking Script is a PHP based online cab booking script by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Cab Booking Script version 1.0. A remote attacker can exploit this vulnerability by sending the 'city' parameter to /service-list to...

9.8CVSS8.3AI score0.0305EPSS
SaveExploits2References1
CNVD
CNVD
added 2017/12/15 12:00 a.m.8 views

PHP Scripts Mall Laundry Booking Script SQL Injection Vulnerability

PHP Scripts Mall Laundry Booking Script is a PHP based laundry online booking website script by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Laundry Booking Script version 1.0. A remote attacker can exploit this vulnerability by sending the 'city' parameter to...

9.8CVSS8.2AI score0.03625EPSS
SaveExploits2References1
CNVD
CNVD
added 2017/12/15 12:00 a.m.12 views

PHP Scripts Mall Chartered Accountant Booking Script SQL Injection Vulnerability

PHP Scripts Mall Chartered Accountant Booking Script is a PHP and MySQL based online search and booking script for accountants by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Chartered Accountant Booking Script version 1.0. A remote attacker can exploit the...

9.8CVSS8.2AI score0.0305EPSS
SaveExploits2References1
OSV
OSV
added 2017/12/13 9:29 a.m.9 views

CVE-2017-17619

Laundry Booking Script 1.0 has SQL Injection via the /list city parameter...

9.8CVSS5.8AI score0.03625EPSS
SaveExploits2References3
NVD
NVD
added 2017/12/13 9:29 a.m.19 views

CVE-2017-17619

Laundry Booking Script 1.0 has SQL Injection via the /list city parameter...

9.8CVSS10AI score0.03625EPSS
SaveExploits2References3
NVD
NVD
added 2017/12/13 9:29 a.m.24 views

CVE-2017-17633

Multiplex Movie Theater Booking Script 3.1.5 has SQL Injection via the trailer-detail.php moid parameter, show-time.php moid parameter, or event-detail.php eid parameter...

9.8CVSS10AI score0.02204EPSS
SaveExploits2References2
NVD
NVD
added 2017/12/13 9:29 a.m.23 views

CVE-2017-17634

Single Theater Booking Script 3.2.1 has SQL Injection via the findcity.php q parameter...

9.8CVSS10AI score0.02204EPSS
SaveExploits2References2
Rows per page
Query Builder