9971 matches found
Cross site scripting
Online Hotel Booking System Pro PHP Version 1.3 has Persistent Cross-site Scripting in Customer registration-form all-tags...
CVE-2020-23984
Online Hotel Booking System Pro PHP Version 1.3 has Persistent Cross-site Scripting in Customer registration-form all-tags...
CVE-2020-23984
CVE-2020-23984 affects Online Hotel Booking System Pro PHP Version 1.3, with a persistent cross-site scripting flaw in the Customer registration-form all-tags. The Red Hat/CNVD/NVD entries corroborate a client-side script execution vulnerability in the registration form. No explicit remediation o...
CVE-2020-23984: Improper Neutralization of Input During Web Page Generation
Online Hotel Booking System Pro PHP Version 1.3 has Persistent Cross-site Scripting in Customer registration-form all-tags...
PT-2020-15616
Name of the Vulnerable Software and Affected Versions Online Hotel Booking System Pro PHP version 1.3 Description The issue is related to Persistent Cross-site Scripting in the customer registration form, allowing malicious code to be executed. This affects the all-tags section of the form...
CVE-2020-24313
Etoile Web Design Ultimate Appointment Booking & Scheduling WordPress Plugin v1.1.9 and lower does not sanitize the value of the "AppointmentID" GET parameter before echoing it back out inside an input tag. This results in a reflected XSS vulnerability that attackers can exploit with a specially...
CVE-2020-24313
Etoile Web Design Ultimate Appointment Booking & Scheduling WordPress Plugin v1.1.9 and lower does not sanitize the value of the "AppointmentID" GET parameter before echoing it back out inside an input tag. This results in a reflected XSS vulnerability that attackers can exploit with a specially...
CVE-2020-24313
CVE-2020-24313 affects Etoile Web Design Ultimate Appointment Booking & Scheduling WordPress Plugin (versions 1.1.9 and lower). The issue is a reflected XSS in which the GET parameter Appointment_ID is echoed back inside an input tag without sanitization, enabling attacker-controlled script via a...
PT-2020-15678 · Etoile Web Design · Etoile Web Design Ultimate Appointment Booking & Scheduling Wordpress Plugin
Name of the Vulnerable Software and Affected Versions: Etoile Web Design Ultimate Appointment Booking & Scheduling WordPress Plugin versions 1.1.9 and lower Description: The issue is related to a reflected XSS vulnerability. It occurs because the Appointment ID GET parameter value is not properly...
CVE-2020-24313: Improper Neutralization of Input During Web Page Generation
Etoile Web Design Ultimate Appointment Booking & Scheduling WordPress Plugin v1.1.9 and lower does not sanitize the value of the "AppointmentID" GET parameter before echoing it back out inside an input tag. This results in a reflected XSS vulnerability that attackers can exploit with a specially...
thailandtransferbooking.com Cross Site Scripting vulnerability OBB-1271265
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
thailandtransferbooking.com Cross Site Scripting vulnerability OBB-1267518
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
thailandtransferbooking.com Cross Site Scripting vulnerability OBB-1262469
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Ultimate Appointment Booking & Scheduling < 1.1.10 - Authenticated Cross-Site Scripting (XSS)
The Ultimate Appointment Booking & Scheduling WordPress plugin, versions 1.1.9 and older, were vulnerable to Authenticated Cross-Site Scripting XSS within multiple parameters...
WordPress Travel Booking Theme Cross Site Scripting (CVE-2020-14951)
A cross-site scripting vulnerability exists in WordPress Travel Booking Theme. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...
thailandtransferbooking.com Cross Site Scripting vulnerability OBB-1244189
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Unauthorized Access Vulnerability in AA Travel Android APP of Shanghai Youheng Hotel Management Co.
AA Travel app is a hotel booking software. Shanghai Youheng Hotel Management Co., Ltd AA Travel Android App has an unauthorized access vulnerability, which can be exploited by attackers to obtain sensitive information...
Web Based Online Hotel Booking System 0.1.0 - Authentication Bypass Vulnerability
Exploit for php platform in category web applications Exploit Title: Web Based Online Hotel Booking System 0.1.0 - Authentication Bypass Exploit Author: KeopssGroup0day,Inc Vendor Homepage: https://github.com/mrzulkarnine/Web-based-hotel-booking-system Software Link:...
Travel Booking < 2.8.4 - Unauthenticated SQL Injection
Unauthenticated SQL Injection via the locationid parameter PoC sqlmap --url="https://example.com/search-rental-full-map/?locationid=1" -dbs --random-agent --time-sec=8 03:13:37 INFO resuming back-end DBMS 'mysql' sqlmap resumed the following injection points from stored session: --- Parameter:...
Travel Booking < 2.8.4 - Unauthenticated Cross-Site Scripting (XSS)
Unauthenticated Reflected XSS via the childnumber parameter https://example.com/search-on-sidebar/?childnumber=%22%20autofocus%20%27--%3E--!%3E%3CInput/Autofocus//Onfocus=alertXSS//%3E...