3517 matches found
CVE-2023-1561 code-projects Simple Online Hotel Reservation System add_room.php unrestricted upload
A vulnerability, which was classified as critical, was found in code-projects Simple Online Hotel Reservation System 1.0. Affected is an unknown function of the file addroom.php. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. VDB-223554 is the...
Simple Online Hotel Reservation System 代码问题漏洞
Simple Online Hotel Reservation System is an online hotel reservation system. A code issue vulnerability exists in Simple Online Hotel Reservation System version 1.0, which stems from a problem with the file addroom.php that can lead to unrestricted uploads...
CVE-2023-1498
A vulnerability classified as critical has been found in code-projects Responsive Hotel Site 1.0. Affected is an unknown function of the file messages.php of the component Newsletter Log Handler. The manipulation of the argument title leads to sql injection. It is possible to launch the attack...
CVE-2023-1498
A vulnerability classified as critical has been found in code-projects Responsive Hotel Site 1.0. Affected is an unknown function of the file messages.php of the component Newsletter Log Handler. The manipulation of the argument title leads to sql injection. It is possible to launch the attack...
Sql injection
A vulnerability classified as critical has been found in code-projects Responsive Hotel Site 1.0. Affected is an unknown function of the file messages.php of the component Newsletter Log Handler. The manipulation of the argument title leads to sql injection. It is possible to launch the attack...
CVE-2023-1498
The CVE-2023-1498 issue affects code-projects Responsive Hotel Site 1.0, specifically the Newsletter Log Handler’s file messages.php. The vulnerability arises from manipulation of the title argument, leading to SQL injection. It can be exploited remotely, and public exploits have been disclosed. ...
CVE-2023-1498 code-projects Responsive Hotel Site Newsletter Log messages.php sql injection
A vulnerability classified as critical has been found in code-projects Responsive Hotel Site 1.0. Affected is an unknown function of the file messages.php of the component Newsletter Log Handler. The manipulation of the argument title leads to sql injection. It is possible to launch the attack...
Responsive Hotel Site SQL注入漏洞
Responsive Hotel Site is a PHP-based responsive hotel website. A SQL injection vulnerability exists in code-projects Responsive Hotel Site version 1.0, which stems from a problem with a function in the file messages.php, where manipulation of the parameter title can lead to sql injection...
PT-2023-17034 · Unknown · Code-Projects Responsive Hotel Site
Name of the Vulnerable Software and Affected Versions: code-projects Responsive Hotel Site version 1.0 Description: A critical vulnerability has been found in the Newsletter Log Handler component of the code-projects Responsive Hotel Site. The issue is related to the manipulation of the title...
WordPress Hotel Booking Lite Plugin <= 4.6.0 is vulnerable to Cross Site Request Forgery (CSRF)
Software Hotel Booking Lite Type Plugin Vulnerable versions = 4.6.0 Fixed in 4.7.0 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-28498 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 1b95488d4796 Credits yuyudhn Required...
WordPress Solidres – Hotel booking plugin Plugin <= 0.9.4 is vulnerable to Cross Site Scripting (XSS)
Software Solidres – Hotel booking plugin Type Plugin Vulnerable versions = 0.9.4 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-1374 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 2295c3bbe77d Credits Daniel...
hotel-belair.ch Cross Site Scripting vulnerability OBB-3212233
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
VikBooking Hotel Booking Engine & PMS < 1.6.0 - Multiple CSRF
The plugin does not have CSRF checks in various functions, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...
WordPress VikBooking Hotel Booking Engine & PMS Plugin <= 1.5.12 is vulnerable to Cross Site Request Forgery (CSRF)
Software VikBooking Hotel Booking Engine & PMS Type Plugin Vulnerable versions = 1.5.12 Fixed in 1.6.0 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-25707 Patch priority Low CVSS severity Low 6.3 Developer Claim ownership PSID 425db90a957f...
russie.hotel-5-etoiles.de Cross Site Scripting vulnerability OBB-3178428
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
VikBooking Hotel Booking Engine & PMS < 1.5.12 - Admin+ Stored XSS
The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
WordPress VikBooking Hotel Booking Engine & PMS Plugin <= 1.5.11 is vulnerable to Cross Site Scripting (XSS)
Software VikBooking Hotel Booking Engine & PMS Type Plugin Vulnerable versions = 1.5.11 Fixed in 1.5.12 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-24396 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID e1f28ff84883 Credits...
hotelmiconiasancristobal.com Cross Site Scripting vulnerability OBB-3157308
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...