9971 matches found
WordPress Booking Calendar Plugin <= 6.2 - Reflected Cross Site Scripting
Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...
WordPress Plugin Booking Calendar 6.2 - SQL Injection
SQL injection vulnerability in Booking Calendar WordPress Plugin Abstract An SQL injection vulnerability exists in the Booking Calendar WordPress plugin. This vulnerability allows an attacker to view data from the database. The affected parameter is not properly sanitized or protected with an...
Booking Now - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Booking Now published at the 'play' market has multiple vulnerabilities...
WordPress Booking Calendar Plugin 6.2 - SQL Injection
Booking Calendar Plugin before 6.2 is prone to a SQL Injection vulnerability. The parameters are not sanitized properly in the wpdevgetargsfromrequestinbklisting function from booking/lib/wpdev-bk-lib.php line 709. It allows remote attackers to view data from the database by luring the target use...
WordPress Booking Calendar Plugin 6.2 - SQL Injection
Booking Calendar Plugin before 6.2 is prone to a SQL Injection vulnerability. The parameters are not sanitized properly in the wpdevgetargsfromrequestinbklisting function from booking/lib/wpdev-bk-lib.php line 709. It allows remote attackers to view data from the database by luring the target use...
Beauty Parlour And SPA Saloon Management System SQL Injection
Vulnerability Title : Beauty Parlour & SPA Saloon Management System Unauthenticated Blind SQL Injection booking.php age Vulnerability Date : 11/07/2016 Exploit Author : Yakir Wizman Vendor Homepage : http://rexbd.net/software/beauty-parlour-and-spa-saloon-management-system Version : All Versions...
WordPress Booking Calendar Contact Form Plugin SQL injection
An SQL injection exists in the WordPress Booking Calendar Contact Form Plugin. It allows an authenticated remote attacker to inject or manipulate SQL queries in the back-end database, allowing for the manipulation or disclosure of arbitrary data...
WordPress Dharma booking Plugin 2.38.3 本地文件包含漏洞
No description provided by source...
WordPress Booking Calendar Contact Form plugin SQL injection vulnerability (CNVD-2016-02465)
WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. Booking System Booking Calendar versions prior to 1.1.23 fail to effectively filter the value of ´cpabcipncheck´, which could...
WordPress Booking Calendar Contact Form Plugin SQL Injection Vulnerability
WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. WordPress Booking Calendar Contact Form plugin suffers from a SQL injection vulnerability by adding specially crafted shortco...
Multiple Vulnerabilities in WordPress Booking Calendar Contact Form Plugin
WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. WordPress Booking Calendar Contact Form plugin version prior to 1.0.23 suffers from a SQL injection, cross-site scripting...
zumatours.net XSS vulnerability
Vulnerable URL: http://www.zumatours.net/wp-content/plugins/rezgo-online-booking-new/framerouter.php?mode=pagedetails=%3C/title%3E%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 08:32 GMT...
Booking Revolution (Wrestling) - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities
HackApp vulnerability scanner discovered that application Booking Revolution Wrestling published at the 'play' market has multiple vulnerabilities...
IHG® Hotel Booking & Deals - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application IHG® Hotel Booking & Deals published at the 'play' market has multiple vulnerabilities...
AccorHotels hotel booking - Customized SSL, Dangerous filesystem permissions, LGPL license vulnerabilities
HackApp vulnerability scanner discovered that application AccorHotels hotel booking published at the 'play' market has multiple vulnerabilities...
TALIXO - Taxi & Limo Booking - Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application TALIXO - Taxi & Limo Booking published at the 'play' market has multiple vulnerabilities...
WordPress Booking Calendar Contact Form 1.0.23 盲注
No description provided by source...
WordPress Dharma Booking 2.28.3 Remote / Local File Inclusion
Exploit Title: Wordpress Dharma booking File Inclusion Date: 03/22/2016 Exploit Author: AMAR^SHG Vendor Homepage:https://wordpress.org/plugins/dharma-booking/ Software Link : https://wordpress.org/plugins/dharma-booking/ Version: =2.28.3 Tested on: WINDOWS/WAMP...
WordPress Dharma booking 2.38.3 Plugin - File Inclusion
Exploit for php platform in category web applications Exploit Title: Wordpress Dharma booking File Inclusion Date: 03/22/2016 Exploit Author: AMAR^SHG Vendor Homepage:https://wordpress.org/plugins/dharma-booking/ Software Link : https://wordpress.org/plugins/dharma-booking/ Version: =2.28.3 Teste...