CVE-2022-28115

Online Sports Complex Booking v1.0 was discovered to contain a SQL injection vulnerability via the id parameter...

CVE-2022-28115

Online Sports Complex Booking v1.0 was discovered to contain a SQL injection vulnerability via the id parameter...

Sql injection

Online Sports Complex Booking v1.0 was discovered to contain a SQL injection vulnerability via the id parameter...

CVE-2022-28115

The CVE-2022-28115 entry applies to Online Sports Complex Booking v1.0. Affected component: the application’s handling of the id parameter. Vulnerability: SQL injection via id parameter, enabling potentially unauthorized access or data manipulation. Root cause stated in the description is a SQL i...

CVE-2022-28115

Online Sports Complex Booking v1.0 was discovered to contain a SQL injection vulnerability via the id parameter...

Online Banquet Booking System 1.0 Cross Site Request Forgery

Exploit Title: Online Banquet Booking System - 'change admin credentials' Cross-Site Request Forgery CSRF Date: 04/04/2022 Exploit Author: Saud Alenazi Vendor Homepage: https://phpgurukul.com Software Link: https://phpgurukul.com/online-banquet-booking-system-using-php-and-mysql/ Version: 1.0...

Online Sports Complex Booking SQL注入漏洞

Online Sports Complex Booking is an online sports complex booking system by Carlo Montero, an individual developer. A security vulnerability exists in Online Sports Complex Booking v1.0 that allows an attacker to perform SQL injection via the id parameter...

CVE-2022-28115: Improper Neutralization of Special Elements used in an SQL Command

Online Sports Complex Booking v1.0 was discovered to contain a SQL injection vulnerability via the id parameter...

PT-2022-18820

Name of the Vulnerable Software and Affected Versions Online Sports Complex Booking version 1.0 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter. Recommendations For Online Sports Complex Booking version 1.0, avoid using t...

CVE-2022-0825

The Amelia WordPress plugin before 1.0.49 does not have proper authorisation when managing appointments, allowing any customer to update other's booking status, as well as retrieve sensitive information about the bookings, such as the full name and phone number of the person who booked it...

CVE-2022-0709

The Booking Package WordPress plugin before 1.5.29 requires a token for exporting the ical representation of it's booking calendar, but this token is returned in the json response to unauthenticated users performing a booking, leading to a sensitive data disclosure vulnerability...

CVE-2022-0825

The Amelia WordPress plugin before 1.0.49 does not have proper authorisation when managing appointments, allowing any customer to update other's booking status, as well as retrieve sensitive information about the bookings, such as the full name and phone number of the person who booked it...

CVE-2022-0709

The Booking Package WordPress plugin before 1.5.29 requires a token for exporting the ical representation of it's booking calendar, but this token is returned in the json response to unauthenticated users performing a booking, leading to a sensitive data disclosure vulnerability...

Information disclosure

The Amelia WordPress plugin before 1.0.49 does not have proper authorisation when managing appointments, allowing any customer to update other's booking status, as well as retrieve sensitive information about the bookings, such as the full name and phone number of the person who booked it...

Spoofing

The Booking Package WordPress plugin before 1.5.29 requires a token for exporting the ical representation of it's booking calendar, but this token is returned in the json response to unauthenticated users performing a booking, leading to a sensitive data disclosure vulnerability...

CVE-2022-0709

The vulnerability CVE-2022-0709 affects the WordPress Booking Package plugin (before 1.5.29). A token used for exporting the iCal booking calendar is returned in unauthenticated booking responses, enabling unauthenticated users to trigger a sensitive data disclosure that may leak booking details ...

CVE-2022-0709 Booking Package < 1.5.29 - Unauthenticated Sensitive Data Disclosure

The Booking Package WordPress plugin before 1.5.29 requires a token for exporting the ical representation of it's booking calendar, but this token is returned in the json response to unauthenticated users performing a booking, leading to a sensitive data disclosure vulnerability...

PT-2022-13379

Name of the Vulnerable Software and Affected Versions Booking Package WordPress plugin versions prior to 1.5.29 Description The issue allows unauthenticated users to obtain sensitive data due to the disclosure of a token used for exporting the ical representation of the booking calendar. This tok...

WordPress plugin Booking Package信息泄露漏洞

WordPress is the Wordpress Foundation's suite of blogging platforms developed using the PHP language. The platform supports the hosting of personal blog sites on PHP and MySQL servers. WordPress Booking Package is vulnerable to an information disclosure vulnerability that could be exploited by...

PT-2022-13450

Name of the Vulnerable Software and Affected Versions Amelia WordPress plugin versions prior to 1.0.49 Description The issue concerns a lack of proper authorization when managing appointments. This allows any customer to update the booking status of others and retrieve sensitive information about...