Hotel Booking Script 3.4 - Cross-Site Request Forgery (Change Admin Password)

Exploit Title: Admin Account take over Via CSRF Google Dork: N/A Date: 17-12-2018 Exploit Author: Sainadh Jamalpur Vendor Homepage: https://www.phpjabbers.com/hotel-booking-system/ Software Link: https://demo.phpjabbers.com/1545033057422/index.php?controller=pjAdmin&action=pjActionIndex Version:...

HotelDruid 2.3 SQL Injection

Exploit Title: SQL Injection in HotelDruid version 2.3 Google Dork: N/A Date: 9-12-2018 Exploit Author: Sainadh Jamalpur Vendor Homepage: http://www.hoteldruid.com Software Link: https://sourceforge.net/projects/hoteldruid/ Version: 2.3 REQUIRED Tested on: Windows x64/ Kali linux x64 CVE : N/A...

HotelDruid 2.3.0 - id_utente_mod SQL Injection

HotelDruid 2.3.0 - idutentemod SQL Injection Exploit Title: SQL Injection in HotelDruid version 2.3 Google Dork: N/A Date: 9-12-2018 Exploit Author: Sainadh Jamalpur Vendor Homepage: http://www.hoteldruid.com Software Link: https://sourceforge.net/projects/hoteldruid/ Version: 2.3 REQUIRED Tested...

hotel-aubergemetzger.com XSS vulnerability

Open Bug Bounty ID: OBB-706208 Description| Value ---|--- Affected Website:| hotel-aubergemetzger.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:...

8 Ways to Avoid the Cybersecurity Grinch This Holiday Season

'Tis the season to be jolly…unless you work in cybersecurity. According to the Carbon Black Threat Analysis Unit TAU, organizations should expect to see a spike in potential cyberattacks starting with Black Friday/Cyber Monday and continuing through the holiday shopping season. TAU’s analysis...

hotel-lahnbruecke.eu XSS vulnerability

Open Bug Bounty ID: OBB-704360 Description| Value ---|--- Affected Website:| hotel-lahnbruecke.eu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

hotel-antares.ch XSS vulnerability

Open Bug Bounty ID: OBB-703389 Description| Value ---|--- Affected Website:| hotel-antares.ch Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

hotel-altstadt.ch XSS vulnerability

Open Bug Bounty ID: OBB-703390 Description| Value ---|--- Affected Website:| hotel-altstadt.ch Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidde...

hotel-delphin.ch XSS vulnerability

Open Bug Bounty ID: OBB-703388 Description| Value ---|--- Affected Website:| hotel-delphin.ch Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

hotel-jaritz.at XSS vulnerability

Open Bug Bounty ID: OBB-702960 Description| Value ---|--- Affected Website:| hotel-jaritz.at Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

hotel-online.com XSS vulnerability

Open Bug Bounty ID: OBB-702402 Description| Value ---|--- Affected Website:| hotel-online.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

Using Airport and Hotel Wi-Fi Is Much Safer Than It Used to Be

You were right not to trust hotel and airport Wi-Fi a few years ago. But these days, it's probably fine...

Eastern Presentation Society APP has information leakage vulnerability

East Presentation Club APP is a hotel booking platform. An information disclosure vulnerability exists in the Dongcheng Club APP. It allows attackers to utilize a packet grabber tool to traverse the Key field to obtain sensitive information about other users...

hotel-matina.com XSS vulnerability

Open Bug Bounty ID: OBB-697224 Description| Value ---|--- Affected Website:| hotel-matina.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

booking.diamondhotel.com XSS vulnerability

Open Bug Bounty ID: OBB-692767 Description| Value ---|--- Affected Website:| booking.diamondhotel.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:...

How Russian Spies Infiltrated Hotel Wi-Fi to Hack Their Victims Up Close

A new indictment details how Russian agents camped outside hotels when remote hacking efforts weren't enough...

Hotel Booking Engine 1.0 - h_room_type SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Hotel Booking Engine 1.0 - 'hroomtype' SQL Injection Exploit Author: Ihsan Sencan Vendor Homepage: http://scriptzee.com/ Software Link: http://scriptzee.com/products/details/35 Version: 1.0 Category: Webapps Tested on:...

Hotel Booking Engine 1.0 SQL Injection

Exploit Title: Hotel Booking Engine 1.0 - 'hroomtype' SQL Injection Dork: N/A Exploit Author: Ihsan Sencan Date: 2018-10-01 Vendor Homepage: http://scriptzee.com/ Software Link: http://scriptzee.com/products/details/35 Version: 1.0 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: CVE-N/A PO...

booking.hotelcaesiusterme.com XSS vulnerability

Open Bug Bounty ID: OBB-676121 Description| Value ---|--- Affected Website:| booking.hotelcaesiusterme.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| BookingEngine Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Call for Customer Presentations: Qualys Security Conference 2018

The annual Qualys user conference, QSC18, is quickly approaching, and we are looking for customer presentations showcasing how you use Qualys to enable security best practices and secure your digital transformation. If you would like to be considered as a presenter, please send a session title an...