timeslot-booking-mk.de XSS vulnerability

Open Bug Bounty ID: OBB-675841 Description| Value ---|--- Affected Website:| timeslot-booking-mk.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

British Airways Hacked – 380,000 Payment Cards Compromised

British Airways, who describes itself as "The World's Favorite Airline," has confirmed a data breach that exposed personal details and credit-card numbers of up to 380,000 customers and lasted for more than two weeks. So who exactly are victims? In a statement released by British Airways on...

stmichaelshotel.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-663989 Description| Value ---|--- Affected Website:| stmichaelshotel.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

PHP Scripts Mall hotel-booking-script Cross-Site Scripting Vulnerability

PHP Scripts Mall hotel-booking-script is a multi-vendor hotel booking script. PHP Scripts Mall hotel-booking-script 2.0.4 suffers from a cross-site scripting vulnerability that can be exploited by an attacker via the First Name, Last Name or Address fields...

PHP Scripts Mall hotel-booking-script Denial of Service Vulnerability

PHP Scripts Mall hotel-booking-script is a hotel booking system script by PHP Scripts Mall India, which includes features like advanced CMS management, review management and booking management. A denial of service vulnerability exists in PHP Scripts Mall hotel-booking-script version 2.0.4, which...

CVE-2018-15191

PHP Scripts Mall hotel-booking-script 2.0.4 allows remote attackers to cause a denial of service via crafted JavaScript code in the First Name, Last Name, or Address field...

Design/Logic Flaw

PHP Scripts Mall hotel-booking-script 2.0.4 allows XSS via the First Name, Last Name, or Address field...

Design/Logic Flaw

PHP Scripts Mall hotel-booking-script 2.0.4 allows remote attackers to cause a denial of service via crafted JavaScript code in the First Name, Last Name, or Address field...

CVE-2018-15190

PHP Scripts Mall hotel-booking-script 2.0.4 allows XSS via the First Name, Last Name, or Address field...

CVE-2018-15190

PHP Scripts Mall hotel-booking-script 2.0.4 allows XSS via the First Name, Last Name, or Address field...

CVE-2018-15191

PHP Scripts Mall hotel-booking-script 2.0.4 allows remote attackers to cause a denial of service via crafted JavaScript code in the First Name, Last Name, or Address field...

CVE-2018-15190

PHP Scripts Mall hotel-booking-script 2.0.4 is affected by a cross-site scripting (XSS) vulnerability that can be triggered via the First Name, Last Name, or Address fields. The CVE entry (CVE-2018-15190) documents this flaw and attributes the issue to input handling in the affected script. Conne...

CVE-2018-15191

CVE-2018-15191 affects PHP Scripts Mall hotel-booking-script 2.0.4. The issue allows remote attackers to induce a denial of service by submitting crafted JavaScript in the First Name, Last Name, or Address fields. Impact described as a DoS vulnerability; no remediation details are provided in the...

CVE-2018-15190: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall hotel-booking-script 2.0.4 allows XSS via the First Name, Last Name, or Address field...

PT-2018-12937

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall hotel-booking-script version 2.0.4 Description The issue allows for XSS attacks through the First Name, Last Name, or Address field. Recommendations For version 2.0.4, update to a newer version that contains a fix for this iss...

PT-2018-12938

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall hotel-booking-script version 2.0.4 Description The issue allows remote attackers to cause a denial of service via crafted JavaScript code in the First Name, Last Name, or Address field. Recommendations For PHP Scripts Mall...

CVE-2018-15191: Improper Restriction of Operations within the Bounds of a Memory Buffer

PHP Scripts Mall hotel-booking-script 2.0.4 allows remote attackers to cause a denial of service via crafted JavaScript code in the First Name, Last Name, or Address field...

yha.co.nz XSS vulnerability

Open Bug Bounty ID: OBB-633885 Description| Value ---|--- Affected Website:| yha.co.nz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

WordPress booking-calendar plugin has unspecified vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site. booking-calendar plugin is used in one of the online booking plugin. A security vulnerability exists in WordPress...

Code injection

An issue was discovered in the WpDevArt "Booking calendar, Appointment Booking System" plugin 2.2.2 for WordPress. Multiple parameters allow remote attackers to manipulate the values to change data such as prices...