ECK Hotel 1.0 Cross Site Request Forgery

Exploit Title : ECK Hotel 1.0 - Cross-Site Request Forgery Add Admin Product : ECK Hotel Version : 1.0-beta Date: 2020-03-26 Software Download: https://sourceforge.net/projects/eckhotel/files/eck-hotel-v1.0-beta.zip/download Exploit Author: Mustafa Emre Gül Website: https://emregul.com.tr/ Tested...

ECK Hotel 1.0 - Cross-Site Request Forgery (Add Admin)

ECK Hotel 1.0 - Cross-Site Request Forgery Add Admin Exploit Title : ECK Hotel 1.0 - Cross-Site Request Forgery Add Admin Product : ECK Hotel Version : 1.0-beta Date: 2020-03-26 Software Download: https://sourceforge.net/projects/eckhotel/files/eck-hotel-v1.0-beta.zip/download Exploit Author:...

hotel-olympic.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1102939 Security Researcher metamorfosec Helped patch 1963 vulnerabilities Received 9 Coordinated Disclosure badges Received 31 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting hotel-olympic.com...

hotel-ariane.fr Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1102898 Security Researcher metamorfosec Helped patch 1963 vulnerabilities Received 9 Coordinated Disclosure badges Received 31 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting hotel-ariane.fr websi...

Private details of 10.7 million MGM Hotel guests sold on Dark Web

By Deeba Ahmed The database on the dark web also includes details of Justin Bieber and Twitter's Jack Dorsey. This is a post from HackRead.com Read the original post: Private details of 10.7 million MGM Hotel guests sold on Dark Web...

hotel-aurora.net Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1085760 Security Researcher geeknik Helped patch 8753 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting hotel-aurora.net website a...

standard-design-hotel-paris.com Cross Site Scripting vulnerability

Security Researcher metamorfosec Helped patch 1919 vulnerabilities Received 9 Coordinated Disclosure badges Received 31 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting standard-design-hotel-paris.com website and its users...

hotel-bastille-speria.com Cross Site Scripting vulnerability

Security Researcher metamorfosec Helped patch 1914 vulnerabilities Received 9 Coordinated Disclosure badges Received 31 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting hotel-bastille-speria.com website and its users...

limetreehotel.com.my Improper Access Control vulnerability

Open Bug Bounty ID: OBB-1074882 Security Researcher geeknik Helped patch 8722 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting limetreehotel.com.my websi...

hotel-pont-royal.com Cross Site Scripting vulnerability

Security Researcher metamorfosec Helped patch 1919 vulnerabilities Received 9 Coordinated Disclosure badges Received 31 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting hotel-pont-royal.com website and its users. Following...

hotel-california-paris.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1063592 Security Researcher metamorfosec Helped patch 1983 vulnerabilities Received 9 Coordinated Disclosure badges Received 32 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting...

paris-hotel-massena.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1062782 Security Researcher metamorfosec Helped patch 1963 vulnerabilities Received 9 Coordinated Disclosure badges Received 31 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting paris-hotel-massena.c...

hotel-cosmopolitan.cz Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1060509 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

hotel-imperial.cz Cross Site Scripting vulnerability

Security Researcher CityBoy Helped patch 94 vulnerabilities Received 3 Coordinated Disclosure badges Received 1 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting hotel-imperial.cz website and its users. Following coordinate...

hotel-cosmopolitan.cz Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1032591 Security Researcher CityBoy Helped patch 97 vulnerabilities Received 3 Coordinated Disclosure badges Received 1 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting hotel-cosmopolitan.cz website...

e-hotel-pattaya.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1021288 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

News Wrap: Hotel Robot Hacks, FTC Stalkerware Crackdown

Threatpost editors break down the top news stories for the week ended Oct. 25. The biggest stories include: An unsecured NFC tag opening a door to trivial exploitation of robots that are used inside Japanese hotels. The FTC has banned the sale of three apps – marketed to monitor children and...

Sourcecodester Hotel and Lodge Management System SQL Injection Vulnerability

Sourcecodester Hotel and Lodge Management System is a hotel and lodge management system. A SQL injection vulnerability exists in Sourcecodester Hotel and Lodge Management System version 1.0, which is caused by a lack of validation of externally entered SQL statements in a database-based applicati...

CVE-2019-18387

Sourcecodester Hotel and Lodge Management System 1.0 is vulnerable to unauthenticated SQL injection and can allow remote attackers to execute arbitrary SQL commands via the id parameter to the edit page for Customer, Room, Currency, Room Booking Details, or Tax Details...

CVE-2019-18387

Sourcecodester Hotel and Lodge Management System 1.0 is vulnerable to unauthenticated SQL injection and can allow remote attackers to execute arbitrary SQL commands via the id parameter to the edit page for Customer, Room, Currency, Room Booking Details, or Tax Details...