Lucene search
+L

3500 matches found

CNNVD
CNNVD
added 2025/09/27 12:00 a.m.9 views

SourceCodester Online Hotel Reservation System SQL注入漏洞

SourceCodester Online Hotel Reservation System is a SourceCodester open source online hotel system. A SQL injection vulnerability exists in SourceCodester Online Hotel Reservation System version 1.0, which originates from the incorrect operation of the parameter address in the file...

9.8CVSS7.8AI score0.00478EPSS
SaveExploits1References6
RedhatCVE
RedhatCVE
added 2025/09/24 6:32 p.m.7 views

CVE-2025-58661

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in eZee Technosys eZee Online Hotel Booking Engine online-booking-engine allows Stored XSS.This issue affects eZee Online Hotel Booking Engine: from n/a through = 1.0.0...

5.9CVSS5.9AI score0.00225EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/09/24 6:30 p.m.11 views

CVE-2025-57938

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in themewant Easy Hotel Booking easy-hotel allows DOM-Based XSS.This issue affects Easy Hotel Booking: from n/a through = 1.9.2...

6.5CVSS5.7AI score0.00217EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/09/24 8:21 a.m.12 views

CVE-2025-10789

A vulnerability was identified in SourceCodester Online Hotel Reservation System 1.0. The impacted element is an unknown function of the file deleteslide.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly availab...

9.8CVSS7.2AI score0.00478EPSS
SaveExploits1References1
OSV
OSV
added 2025/09/23 6:15 a.m.8 views

CVE-2025-10843

A flaw has been found in Reservation Online Hotel Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file /reservation/paypalpayout.php. Executing manipulation of the argument confirm can lead to sql injection. The attack may be launched remotely. The exploi...

9.8CVSS5.8AI score0.00417EPSS
SaveExploits1References4
CVE
CVE
added 2025/09/23 6:02 a.m.30 views

CVE-2025-10843

CVE-2025-10843 affects the Reservation Online Hotel Reservation System 1.0. The vulnerability lies in the file /reservation/paypalpayout.php, where manipulation of the confirm parameter enables SQL injection. The attack can be launched remotely, and an exploit has been published. No remediation d...

9.8CVSS6.7AI score0.00417EPSS
SaveExploits1References4Affected Software1
CNNVD
CNNVD
added 2025/09/23 12:00 a.m.12 views

Code-Projects Online Hotel Reservation System In PHP SQL注入漏洞

Code-Projects Online Hotel Reservation System In PHP is a Code-Projects open source online hotel reservation system. A SQL injection vulnerability exists in Code-Projects Online Hotel Reservation System In PHP version 1.0, which originates from an incorrect manipulation of the parameter confirm i...

9.8CVSS7.7AI score0.00417EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2025/09/23 12:00 a.m.16 views

PT-2025-39123

Name of the Vulnerable Software and Affected Versions Reservation Online Hotel Reservation System version 1.0 Description A flaw exists in an unknown functionality of the file '/reservation/paypalpayout.php'. Manipulation of the confirm argument can lead to SQL injection. The attack can be launch...

9.8CVSS6.6AI score0.00417EPSS
SaveExploits1References8
NVD
NVD
added 2025/09/22 7:15 p.m.10 views

CVE-2025-57938

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in themewant Easy Hotel Booking easy-hotel allows DOM-Based XSS.This issue affects Easy Hotel Booking: from n/a through = 1.9.0...

6.5CVSS0.00217EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/09/22 7:11 p.m.15 views

WordPress Easy Hotel Booking plugin <= 1.8.8 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Abu Hurayra in WordPress Plugin Easy Hotel Booking versions = 1.8.8...

6.5CVSS5.2AI score0.00217EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2025/09/22 6:39 p.m.7 views

WordPress eZee Online Hotel Booking Engine Plugin <= 1.0.0 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Vinit Lakra in WordPress Plugin eZee Online Hotel Booking Engine versions = 1.0.0...

5.9CVSS6AI score0.00225EPSS
SaveExploits0Affected Software1
Cvelist
Cvelist
added 2025/09/22 6:25 p.m.21 views

CVE-2025-57938 WordPress Easy Hotel Booking plugin <= 1.9.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in themewant Easy Hotel Booking easy-hotel allows DOM-Based XSS.This issue affects Easy Hotel Booking: from n/a through = 1.9.0...

6.5CVSS0.00217EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/09/22 6:25 p.m.5 views

CVE-2025-57938 WordPress Easy Hotel Booking plugin <= 1.9.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in themewant Easy Hotel Booking easy-hotel allows DOM-Based XSS.This issue affects Easy Hotel Booking: from n/a through = 1.9.0...

6.5CVSS5.2AI score0.00217EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2025/09/22 6:25 p.m.9 views

CVE-2025-57938

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in themewant Easy Hotel Booking easy-hotel allows DOM-Based XSS.This issue affects Easy Hotel Booking: from n/a through = 1.9.2...

6.5CVSS5.7AI score0.00217EPSS
SaveExploits0References3
CVE
CVE
added 2025/09/22 6:25 p.m.22 views

CVE-2025-57938

CVE-2025-57938 describes a DOM-based Cross-Site Scripting vulnerability in the WordPress plugin Easy Hotel Booking (themename: Easy Hotel Booking) that is exploitable via improper input handling during web page generation. Affected version range is shown as “n/a through 1.6.9”; the CVSS vector (3...

6.5CVSS5.2AI score0.00217EPSS
SaveExploits0References1
CVE
CVE
added 2025/09/22 6:23 p.m.15 views

CVE-2025-58661

Technical details not publicly provided in the supplied documents for CVE-2025-58661 (eZee Online Hotel Booking Engine). Update with affected versions, impact, and remediation when available.

5.9CVSS5.9AI score0.00225EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/09/22 6:23 p.m.18 views

CVE-2025-58661 WordPress eZee Online Hotel Booking Engine Plugin <= 1.0.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in eZee Technosys eZee Online Hotel Booking Engine online-booking-engine allows Stored XSS.This issue affects eZee Online Hotel Booking Engine: from n/a through = 1.0.0...

5.9CVSS0.00225EPSS
SaveExploits0References1
NVD
NVD
added 2025/09/22 8:15 a.m.9 views

CVE-2025-10788

A vulnerability was determined in SourceCodester Online Hotel Reservation System 1.0. The affected element is an unknown function of the file deleteroominventory.php. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been...

9.8CVSS0.00478EPSS
SaveExploits1References5
OSV
OSV
added 2025/09/22 8:15 a.m.12 views

CVE-2025-10789

A vulnerability was identified in SourceCodester Online Hotel Reservation System 1.0. The impacted element is an unknown function of the file deleteslide.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly availab...

9.8CVSS5.7AI score0.00478EPSS
SaveExploits1References5
OSV
OSV
added 2025/09/22 8:15 a.m.11 views

CVE-2025-10788

A vulnerability was determined in SourceCodester Online Hotel Reservation System 1.0. The affected element is an unknown function of the file deleteroominventory.php. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been...

9.8CVSS5.8AI score0.00478EPSS
SaveExploits1References5
Rows per page
Query Builder