CVE-2014-10015

SQL injection vulnerability in load-calendar.php in PHPJabbers Event Booking Calendar 2.0 allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2014-10014

Multiple cross-site request forgery CSRF vulnerabilities in PHPJabbers Event Booking Calendar 2.0 allow remote attackers to hijack the authentication of administrators for requests that 1 change the username and password of the administrator via an update action to the AdminOptions controller or...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in PHPJabbers Event Booking Calendar 2.0 allow remote attackers to hijack the authentication of administrators for requests that 1 change the username and password of the administrator via an update action to the AdminOptions controller or...

CVE-2014-10014

Multiple cross-site request forgery CSRF vulnerabilities in PHPJabbers Event Booking Calendar 2.0 allow remote attackers to hijack the authentication of administrators for requests that 1 change the username and password of the administrator via an update action to the AdminOptions controller or...

CVE-2014-10014

This CVE concerns PHPJabbers Event Booking Calendar 2.0 with multiple CSRF vulnerabilities. The affected component paths include AdminOptions (update action that can change administrator username/password), AdminEvents (create action with event_title that can lead to XSS), and AdminCategories (cr...

CVE-2014-10015

CVE-2014-10015 is a SQL injection vulnerability in the PHPJabbers Event Booking Calendar 2.0, specifically in load-calendar.php where the vulnerable parameter is cid . The issue allows remote attackers to execute arbitrary SQL commands, as described across multiple sources (NVD entry and corrobor...

CVE-2014-10015

SQL injection vulnerability in load-calendar.php in PHPJabbers Event Booking Calendar 2.0 allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2014-10014: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in PHPJabbers Event Booking Calendar 2.0 allow remote attackers to hijack the authentication of administrators for requests that 1 change the username and password of the administrator via an update action to the AdminOptions controller or...

CVE-2014-10015: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in load-calendar.php in PHPJabbers Event Booking Calendar 2.0 allows remote attackers to execute arbitrary SQL commands via the cid parameter...

Online Airline Booking System Authentication Bypass

Exploit Title : Online Airline Booking System multiple vulnerabilities Author : WICS Date : 05/1/2016 Software Link : http://sourceforge.net/projects/oabs/ Affected Version: All Overview: The Online Airline Booking System is designed to be an all in one solution for an airline wishing to speed up...

Events Booking, 1.6.7 and lower, (module: Search Events)

Events Booking 1.6.7 =Vulnerability: XSS Cross Site Scripting Extension Update Details This issue only affect the search module Search Events which comes with Events Booking. We released version 1.6.8 to address this issue...

CVE-2014-7647

The BOOKING DISCOUNT aka com.wmygoodhotelscom application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7647

The CVE-2014-7647 entry concerns the BOOKING DISCOUNT (com.wmygoodhotelscom) Android app version 0.1, where SSL server certificate validation is not performed. This allows a man-in-the-middle attacker to spoof servers and potentially obtain sensitive information via a crafted certificate. The doc...

CVE-2014-7647

The BOOKING DISCOUNT aka com.wmygoodhotelscom application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7647: Undefined Security Weakness

The BOOKING DISCOUNT aka com.wmygoodhotelscom application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Booking Calendar <= 4.1.5 - Cross-Site Request Forgery (CSRF)

The Booking Calendar WordPress plugin was affected by a Cross-Site Request Forgery CSRF security vulnerability...

WordPress Booking Calendar plugin <= 4.1.5 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability discovered by Dylan Irzi in WordPress Booking Calendar plugin versions = 4.1.5. Solution Update the WordPress Booking Calendar plugin to the latest available version at least 4.1.6...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in templates/default/indexajax.php in the Rezgo Online Booking plugin before 1.8.2 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 tags or 2 searchfor parameter...

CVE-2014-4547

The CVE-2014-4547 entry concerns the Rezgo Online Booking WordPress plugin. It describes multiple cross-site scripting (XSS) vulnerabilities in templates/default/index_ajax.php that allow remote attackers to inject arbitrary web script or HTML via the (1) tags or (2) search_for parameter in plugi...

CVE-2014-4547

Multiple cross-site scripting XSS vulnerabilities in templates/default/indexajax.php in the Rezgo Online Booking plugin before 1.8.2 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 tags or 2 searchfor parameter...