29 matches found
CVE-2021-33948
SQL injection vulnerability in FantasticLBP Hotels Server v1.0 allows attacker to execute arbitrary code via the username parameter...
CVE-2021-33948
CVE-2021-33948 describes a SQL injection in FantasticLBP Hotels Server v1.0 where an attacker can inject via the username parameter to execute arbitrary code. The vulnerability is rated CRITICAL (CVSS v3.1: 9.8) with a NETWORK attack vector, no privileges required , and no user interaction needed...
CVE-2021-33948
SQL injection vulnerability in FantasticLBP Hotels Server v1.0 allows attacker to execute arbitrary code via the username parameter...
Vulnerability of the /controller/publishHotel.php component of the Hotels Server content management system, allowing a hacker to execute arbitrary code.
The vulnerability of the /controller/publishHotel.php component of the Hotels Server content management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2020-18102
Cross Site Scripting XSS in HotelsServer v1.0 allows remote attackers to execute arbitrary code by injecting crafted commands the data fields in the component "/controller/publishHotel.php"...
Hotels_Server 跨站脚本漏洞
HotelsServer is a backend management system for hotel reservation systems. A cross-site scripting vulnerability exists in HotelsServer version 1.0. The vulnerability originates from a program that allows remote attackers to inject data fields in the component "/controller/publishHotel.php" to...
CVE-2019-8393
HotelsServer through 2018-11-05 has SQL Injection via the API because the controller/api/login.php telephone parameter is mishandled...
