9971 matches found
CVE-2020-25273
The CVE-2020-25273 entry concerns SourceCodester Online Bus Booking System 1.0 with an authentication bypass on the Admin Login. The connected exploit repository provides concrete details: the vulnerability resides in the login flow (admin.php/login_auth.php) and is triggered via SQL injection in...
CVE-2020-25272
In SourceCodester Online Bus Booking System 1.0, there is XSS through the name parameter in booknow.php...
CVE-2020-25272
CVE-2020-25272 corresponds to an XSS vulnerability in SourceCodester Online Bus Booking System 1.0, triggered via the name parameter in book_now.php. The available connected documents confirm the affected product and the vulnerability vector, but do not provide details on the exploitation status,...
PT-2020-16056
Name of the Vulnerable Software and Affected Versions SourceCodester Online Bus Booking System version 1.0 Description The issue concerns an authentication bypass on the Admin Login screen. This is achieved through SQL injection in the username or password fields in the admin.php file...
CVE-2020-25272: Improper Neutralization of Input During Web Page Generation
In SourceCodester Online Bus Booking System 1.0, there is XSS through the name parameter in booknow.php...
PT-2020-16055
Name of the Vulnerable Software and Affected Versions SourceCodester Online Bus Booking System version 1.0 Description The issue concerns a problem where an attacker can inject malicious code through the name parameter in the "book now.php" endpoint. This allows for potential exploitation...
CVE-2020-25273: Improper Neutralization of Special Elements used in an SQL Command
In SourceCodester Online Bus Booking System 1.0, there is Authentication bypass on the Admin Login screen in admin.php via username or password SQL injection...
booking.lesultan.com Cross Site Scripting vulnerability OBB-1374693
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
luton-taxi-booking.co.uk Cross Site Scripting vulnerability OBB-1373235
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
thailandtransferbooking.com Cross Site Scripting vulnerability OBB-1366352
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Exploit for SQL Injection in Online_Bus_Booking_System_Project Online_Bus_Booking_System
CVE-2020-25273 Online Bus Booking System 1.0, there is Authen...
WordPress WP Hotel Booking plugin <= 1.10.1 - Cross-Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability found by Jerome Bruandet NinTechNet in WordPress WP Hotel Booking plugin versions = 1.10.1. Solution Update the WordPress WP Hotel Booking plugin to the latest available version at least 1.10.2...
thailandtransferbooking.com Cross Site Scripting vulnerability OBB-1324169
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
booking.lesultan.com Cross Site Scripting vulnerability OBB-1297070
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
thailandtransferbooking.com Cross Site Scripting vulnerability OBB-1294766
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
booking.myguestcare.com Cross Site Scripting vulnerability OBB-1292521
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Online Hotel Booking System Pro Cross-Site Scripting Vulnerability (CNVD-2020-52192)
Online Hotel Booking System Pro is a hotel booking system. A cross-site scripting vulnerability exists in the customer registration form in Online Hotel Booking System Pro 1.3, which can be exploited by an attacker to execute client-side code...
WordPress Cross-Site Scripting Vulnerability (CNVD-2020-54948)
WordPress is a blogging platform developed using the PHP language, which supports the setting up of personal blog sites on servers with PHP and MySQL. It is widely used internationally and is compatible with self-developed plugins. Powerful and widely used.Ultimate Appointment Booking & Schedulin...
