9971 matches found
iCAM Workstation Control 4.8.0.0 - Authentication Bypass
No description provided by source. Exploit Title: iCAM Workstation Control Software Local Authentication Bypass Google Dork: Vendor: Insight Media Internet Limited is based in the North West of England, and has 10 years experience in developing both internet and software solutions. Our staff are...
BSI Advance Hotel Booking System 1.0 - SQL Injection Vulnerability
No description provided by source. ----------------------------------------------------------------------- PHP BSI Advance Hotel Booking System v1.0 SQL Injection Vulnerability ----------------------------------------------------------------------- Author : v3n0m Site :...
Joomla 1.5 Jreservation Component SQLi And XSS Vulnerability
No description provided by source. ============================================================ Joomla 1.5 Jreservation Component SQLi And XSS Vulnerability ============================================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 ...
BSI Hotel Booking System Admin 1.4 & 2.0 - Login Bypass Vulnerability
No description provided by source. ----------------------------------------------------------------------------------------- ECHOADV113$2010 BSI Hotel Booking System Admin Login Bypass Vulnerability ----------------------------------------------------------------------------------------- Author :...
CBHotel Hotel Software and Booking system 1.8 - Multiple Vulnerabilities
No description provided by source. Exploit Title: Hotel Software and Booking system 1.8 - SQL Injection / Cross Site Scripting Date: 21 de Agosto del 2013 Exploit Author: Dylan Irzi Credit goes for: websecuritydev.com Vendor Homepage: http://www.cbhotel.eu/ Tested on: Win8 & Linux Mint Affected...
WordPress Rezgo Online Booking Plugin <= 1.8.1 - Multiple XSS
Because of these vulnerabilities, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...
WordPress Easy Booking Plugin <= 1.0.3 - XSS
Because of this vulnerability in admin/editFacility.php, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...
Wordpress Booking System (Booking Calendar) plugin SQL Injection
Exploit Title: Wordpress Booking System Booking Calendar plugin SQL Injection Release Date: 2014-05-21 Author: maodun Contact: Twitter: @conmancm Software Link: http://wordpress.org/support/plugin/booking-system Affected version: 1.3 Google Dork: inurl:/wp-content/plugins/booking-system/...
CVE-2014-4035
Cross-site scripting XSS vulnerability in bookingdetails.php in Best Soft Inc. BSI Advance Hotel Booking System 2.0 allows remote attackers to inject arbitrary web script or HTML via the title parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in bookingdetails.php in Best Soft Inc. BSI Advance Hotel Booking System 2.0 allows remote attackers to inject arbitrary web script or HTML via the title parameter...
CVE-2014-4035
Cross-site scripting XSS vulnerability in bookingdetails.php in Best Soft Inc. BSI Advance Hotel Booking System 2.0 allows remote attackers to inject arbitrary web script or HTML via the title parameter...
CVE-2014-4035
CVE-2014-4035 affects Best Soft Inc. (BSI) Advance Hotel Booking System 2.0. The vulnerability is a cross-site scripting (XSS) in booking_details.php where the attacker can inject arbitrary script via the title parameter. Public materials (exploits and writeups) indicate a persistent XSS variant ...
PT-2014-5687
Name of the Vulnerable Software and Affected Versions Best Soft Inc. BSI Advance Hotel Booking System version 2.0 Description The issue is related to a cross-site scripting XSS vulnerability. It allows remote attackers to inject arbitrary web script or HTML via the title parameter in the booking...
CVE-2014-4035: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in bookingdetails.php in Best Soft Inc. BSI Advance Hotel Booking System 2.0 allows remote attackers to inject arbitrary web script or HTML via the title parameter...
BSI Advance Hotel Booking System Persistent XSS Vulnerability
Exploit for php platform in category web applications Vulnerability ======================== +Method:POST 1.http://URL/hotel-booking/bookingdetails.php ;persistent XSS allowlang=&title=IMG SRC="javascript:alert'HelloWorld...
BSI Advance Hotel Booking System 2.0 Cross Site Scripting
Exploit Title:BSI Advance Hotel Booking System Persistent XSS Google Dork: intext:Hotel Booking System v2.0 © 2008 - 2012 Copyright Best Soft Inc Date: Wed Jun 4 2014 Exploit Author: Angelo Ruwantha Vendor Homepage: http://www.bestsoftinc.com Software Link:...
Rezgo <= 1.4.2 - XSS
The Rezgo Online Booking WordPress plugin was affected by a XSS security vulnerability...
Rezgo Online Booking < 1.8.2 - Multiple XSS
The rezgo-online-booking WordPress plugin was affected by a Multiple XSS security vulnerability...
CVE-2014-3210
SQL injection vulnerability in dopbs-backend-forms.php in the Booking System Booking Calendar plugin before 1.3 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the bookingformid parameter to wp-admin/admin-ajax.php...
Sql injection
SQL injection vulnerability in dopbs-backend-forms.php in the Booking System Booking Calendar plugin before 1.3 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the bookingformid parameter to wp-admin/admin-ajax.php...