CVE-2015-1000009

CVE-2015-1000009 affects the WordPress plugin google-adsense-and-hotel-booking version 1.05, specifically the proxy.php script. The vulnerability results in an open proxy/post proxy capability, allowing an attacker to proxy POST requests through the host site, potentially aiding attack concealmen...

PT-2016-3577

Name of the Vulnerable Software and Affected Versions google-adsense-and-hotel-booking version 1.05 Description The issue concerns an open proxy in the Wordpress plugin. Recommendations For version 1.05, update to a newer version that contains a fix for this issue...

CVE-2015-1000009: Improper Access Control

Open proxy in Wordpress plugin google-adsense-and-hotel-booking v1.05...

Joomla com_ jomres SQL injection Vulnerability

Exploit for php platform in category web applications Exploit Title : Joomla com jomres SQL injection Vulnerability Exploit Author : xBADGIRL21 Dork : index.php?option=com jomres "propertyuid" Software link : https://www.jomres.net/files/jomresjoomlacomponentinstaller.zip Vendor Homepage :...

WordPress Appointment Schedule Booking System - Authenticated Stored XSS

The wp-appointment-schedule-booking-system WordPress plugin was affected by an Authenticated Stored XSS security vulnerability...

WordPress Appointment Schedule Booking System Plugin - XSS

Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...

Joomla! Component Event Booking component SQL injection vulnerability

Joomla! is an open source content management system CMS, the system provides RSS feeds, site search and other functions. A SQL injection vulnerability exists in Joomla! Component Event Booking version 2.10.1. The vulnerability exists because the program fails to adequately filter user-submitted...

Joomla Event Booking 2.10.1 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title : Joomla Event Booking Component - SQL Injection Exploit Author : Persian Hack Team Homepage : http://persian-team.ir Vendor Homepage : http://extensions.joomla.org/extension/event-booking Category Webapps Tested on Win Version :...

Joomla! Component Event Booking 2.10.1 - SQL Injection

Exploit Title : Joomla Event Booking Component - SQL Injection Exploit Author : Persian Hack Team Homepage : http://persian-team.ir Vendor Homepage : http://extensions.joomla.org/extension/event-booking Category Webapps Tested on Win Version : 2.10.1 Date 2016/09/25 PoC = Sql Injection : Date...

Joomla! Component Event Booking 2.10.1 - SQL Injection

Joomla! Component Event Booking 2.10.1 - SQL Injection Exploit Title : Joomla Event Booking Component - SQL Injection Exploit Author : Persian Hack Team Homepage : http://persian-team.ir Vendor Homepage : http://extensions.joomla.org/extension/event-booking Category Webapps Tested on Win Version ...

Joomla Event Booking 2.10.1 SQL Injection

Exploit Title : Joomla Event Booking Component - SQL Injection Exploit Author : Persian Hack Team Homepage : http://persian-team.ir Vendor Homepage : http://extensions.joomla.org/extension/event-booking Category Webapps Tested on Win Version : 2.10.1 Date 2016/09/25 PoC = Sql Injection : Date...

WordPress Plugin Booking Calendar SQL Injection Vulnerability

WordPress is a blogging platform developed using the PHP language that allows users to set up their own weblogs on servers that support PHP and MySQL databases.Booking Calendar is a WEB-based calendar application. A SQL injection vulnerability exists in the WordPress plugin Booking Calendar. An...

WordPress Booking Calendar 6.2.1 Cross Site Scripting

------------------------------------------------------------------------ Cross-Site Scripting vulnerability in Booking Calendar WordPress Plugin ------------------------------------------------------------------------ Edwin Molenaar, July 2016...

WordPress Booking Calendar 6.2 SQL Injection

------------------------------------------------------------------------ SQL injection vulnerability in Booking Calendar WordPress Plugin ------------------------------------------------------------------------ Edwin Molenaar, July 2016...

WordPress Booking Calendar 6.2 Plugin - SQL Injection

Exploit for php platform in category web applications SQL injection vulnerability in Booking Calendar WordPress Plugin Abstract An SQL injection vulnerability exists in the Booking Calendar WordPress plugin. This vulnerability allows an attacker to view data from the database. The affected...

Booking Calendar <= 6.2 - Reflected Cross-Site Scripting (XSS)

The Booking Calendar WordPress plugin was affected by a Reflected Cross-Site Scripting XSS security vulnerability...

Booking Calendar <= 6.2 - SQL Injection

The Booking Calendar WordPress plugin was affected by a SQL Injection security vulnerability...

WordPress Booking Calendar Plugin <= 6.2 - Reflected Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...

WordPress Booking Calendar plugin <= 6.2 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by ethicalhack3r in WordPress Booking Calendar plugin versions = 6.2. Solution Update the WordPress Booking Calendar plugin to the latest available version at least 6.2.1...

WordPress Booking Calendar plugin <= 6.2 - SQL Injection (SQLi) vulnerability

SQL Injection SQLi vulnerability discovered by ethicalhack3r in WordPress Booking Calendar plugin versions = 6.2. Solution Update the WordPress Booking Calendar plugin to the latest available version at least 6.2.1...