9971 matches found
WordPress Plugin Booking Calendar Contact Form 1.0.2 - Multiple Vulnerabilities
Exploit Title: WordPress Booking Calendar Contact Form 1.0.2Multiple vulnerabilities Date: 2015-05-01 Google Dork: Index of /wordpress/wp-content/plugins/booking-calendar-contact-form/ Exploit Author: Joaquin Ramirez Martinez i0akiN SEC-LABORATORY Software Link:...
CVE-2014-10015
SQL injection vulnerability in load-calendar.php in PHPJabbers Event Booking Calendar 2.0 allows remote attackers to execute arbitrary SQL commands via the cid parameter...
CVE-2014-10014
Multiple cross-site request forgery CSRF vulnerabilities in PHPJabbers Event Booking Calendar 2.0 allow remote attackers to hijack the authentication of administrators for requests that 1 change the username and password of the administrator via an update action to the AdminOptions controller or...
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities in PHPJabbers Event Booking Calendar 2.0 allow remote attackers to hijack the authentication of administrators for requests that 1 change the username and password of the administrator via an update action to the AdminOptions controller or...
CVE-2014-10015
SQL injection vulnerability in load-calendar.php in PHPJabbers Event Booking Calendar 2.0 allows remote attackers to execute arbitrary SQL commands via the cid parameter...
CVE-2014-10014
This CVE concerns PHPJabbers Event Booking Calendar 2.0 with multiple CSRF vulnerabilities. The affected component paths include AdminOptions (update action that can change administrator username/password), AdminEvents (create action with event_title that can lead to XSS), and AdminCategories (cr...
CVE-2014-10015
CVE-2014-10015 is a SQL injection vulnerability in the PHPJabbers Event Booking Calendar 2.0, specifically in load-calendar.php where the vulnerable parameter is cid . The issue allows remote attackers to execute arbitrary SQL commands, as described across multiple sources (NVD entry and corrobor...
CVE-2014-10014
Multiple cross-site request forgery CSRF vulnerabilities in PHPJabbers Event Booking Calendar 2.0 allow remote attackers to hijack the authentication of administrators for requests that 1 change the username and password of the administrator via an update action to the AdminOptions controller or...
PT-2015-3658
Name of the Vulnerable Software and Affected Versions PHPJabbers Event Booking Calendar version 2.0 Description The issue affects the authentication of administrators, allowing remote attackers to hijack it for requests. This can be achieved through multiple cross-site request forgery CSRF...
PT-2015-3659
Name of the Vulnerable Software and Affected Versions PHPJabbers Event Booking Calendar version 2.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the cid parameter in the "load-calendar.php" file. Recommendations For PHPJabbers Event Booking...
CVE-2014-10015: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in load-calendar.php in PHPJabbers Event Booking Calendar 2.0 allows remote attackers to execute arbitrary SQL commands via the cid parameter...
CVE-2014-10014: Cross-Site Request Forgery (CSRF)
Multiple cross-site request forgery CSRF vulnerabilities in PHPJabbers Event Booking Calendar 2.0 allow remote attackers to hijack the authentication of administrators for requests that 1 change the username and password of the administrator via an update action to the AdminOptions controller or...
Online Airline Booking System Authentication Bypass
Exploit Title : Online Airline Booking System multiple vulnerabilities Author : WICS Date : 05/1/2016 Software Link : http://sourceforge.net/projects/oabs/ Affected Version: All Overview: The Online Airline Booking System is designed to be an all in one solution for an airline wishing to speed up...
Events Booking, 1.6.7 and lower, (module: Search Events)
Events Booking 1.6.7 =Vulnerability: XSS Cross Site Scripting Extension Update Details This issue only affect the search module Search Events which comes with Events Booking. We released version 1.6.8 to address this issue...
CVE-2014-7647
The BOOKING DISCOUNT aka com.wmygoodhotelscom application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7647
The BOOKING DISCOUNT aka com.wmygoodhotelscom application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7647
The CVE-2014-7647 entry concerns the BOOKING DISCOUNT (com.wmygoodhotelscom) Android app version 0.1, where SSL server certificate validation is not performed. This allows a man-in-the-middle attacker to spoof servers and potentially obtain sensitive information via a crafted certificate. The doc...
PT-2014-8159
Name of the Vulnerable Software and Affected Versions BOOKING DISCOUNT aka com.wmygoodhotelscom application version 0.1 Description The application does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a...
CVE-2014-7647: Undefined Security Weakness
The BOOKING DISCOUNT aka com.wmygoodhotelscom application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
