211 matches found
CVE-2023-6219
CVE-2023-6219 affects the BookingPress – Appointment Booking Calendar Plugin for WordPress. It allows authenticated administrators (or higher) to upload arbitrary files via the bookingpress_process_upload function due to insufficient input validation, up to and including version 1.0.76, with pote...
CVE-2023-6219 BookingPress <= 1.0.76 - Authenticated (Administrator+) Arbitrary File Upload
The BookingPress plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file validation on the 'bookingpressprocessupload' function in versions up to, and including, 1.0.76. This makes it possible for authenticated attackers with administrator-level capabilities or above...
WordPress Plugin JBookingPress Security Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin JBookingPress 1.0....
PT-2023-32568 · WordPress · Bookingpress
Name of the Vulnerable Software and Affected Versions: BookingPress plugin for WordPress versions up to, and including, 1.0.76 Description: The issue is related to insufficient file validation on the bookingpress process upload function, allowing authenticated attackers with administrator-level...
WordPress BookingPress Plugin <= 1.0.76 is vulnerable to Arbitrary File Upload
Software BookingPress Type Plugin Vulnerable versions = 1.0.76 Fixed in 1.0.77 OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2023-6219 Patch priority Low CVSS severity Low 6.6 Developer Claim ownership PSID d9226b37951c Credits István Márton Required privilege...
WordPress BookingPress Plugin <= 1.0.64 is vulnerable to Sensitive Data Exposure
Software BookingPress Type Plugin Vulnerable versions = 1.0.64 Fixed in 1.0.65 OWASP Top 10 A5: Broken Access Control Classification Sensitive Data Exposure CVE CVE-2023-36507 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID e634d3e6d42f Credits Paul Goodchild Required...
Exploit for SQL Injection in Reputeinfosystems Bookingpress
Bash exploit for CVE-2022-0739 Unauthenticated SQL Injection...
Exploit for SQL Injection in Reputeinfosystems Bookingpress
Bash exploit for CVE-2022-0739 Unauthenticated SQL Injection...
Exploit for SQL Injection in Reputeinfosystems Bookingpress
CVE-2022-0739 BookingPress 1.0.11 - Unauthenticated SQL Inj...
Exploit for SQL Injection in Reputeinfosystems Bookingpress
CVE-2022-0739 My take on CVE-2022-0739 BookingPress exploit,...
CVE-2022-4340
The BookingPress WordPress plugin before 1.0.31 suffers from an Insecure Direct Object Reference IDOR vulnerability in it's thank you page, allowing any visitor to display information about any booking, including full name, date, time and service booked, by manipulating the appointmentid query...
Information disclosure
The BookingPress WordPress plugin before 1.0.31 suffers from an Insecure Direct Object Reference IDOR vulnerability in it's thank you page, allowing any visitor to display information about any booking, including full name, date, time and service booked, by manipulating the appointmentid query...
CVE-2022-4340
BookingPress WordPress plugin (versions before 1.0.31) is affected by an Insecure Direct Object Reference (IDOR) in the thank-you page. The underlying issue enables unauthenticated users to view booking details (full name, date, time, service) by altering the appointment_id parameter. Reported in...
CVE-2022-4340 BookingPress < 1.0.31 - Unauthenticated IDOR in appointment_id
The BookingPress WordPress plugin before 1.0.31 suffers from an Insecure Direct Object Reference IDOR vulnerability in it's thank you page, allowing any visitor to display information about any booking, including full name, date, time and service booked, by manipulating the appointmentid query...
CVE-2022-4340 BookingPress < 1.0.31 - Unauthenticated IDOR in appointment_id
The BookingPress WordPress plugin before 1.0.31 suffers from an Insecure Direct Object Reference IDOR vulnerability in it's thank you page, allowing any visitor to display information about any booking, including full name, date, time and service booked, by manipulating the appointmentid query...
PT-2023-14197 · WordPress · Bookingpress
Name of the Vulnerable Software and Affected Versions: BookingPress WordPress plugin versions prior to 1.0.31 Description: The issue allows any visitor to display information about any booking by manipulating the appointment id query parameter in the thank you page, potentially exposing full name...
WordPress plugin BookingPress 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
BookingPress < 1.0.31 - Unauthenticated IDOR in appointment_id
The plugin suffers from an Insecure Direct Object Reference IDOR vulnerability in it's thank you page, allowing any visitor to display information about any booking, including full name, date, time and service booked, by manipulating the appointmentid query parameter. PoC curl -s...