225 matches found
PT-2023-23835 · E4J S.R.L. · Vikbooking Hotel Booking Engine & Pms
Name of the Vulnerable Software and Affected Versions: E4J s.R.L. VikBooking Hotel Booking Engine & PMS plugin versions = 1.6.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web applicatio...
CVE-2023-41301
Vulnerability of unauthorized API access in the PMS module. Successful exploitation of this vulnerability may cause features to perform abnormally...
CVE-2023-41300
Vulnerability of parameters not being strictly verified in the PMS module. Successful exploitation of this vulnerability may cause the system to restart...
CVE-2023-41301
Vulnerability of unauthorized API access in the PMS module. Successful exploitation of this vulnerability may cause features to perform abnormally...
Design/Logic Flaw
Vulnerability of unauthorized API access in the PMS module. Successful exploitation of this vulnerability may cause features to perform abnormally...
CVE-2023-41299
DoS vulnerability in the PMS module. Successful exploitation of this vulnerability may cause the system to restart...
CVE-2023-41299
DoS vulnerability in the PMS module. Successful exploitation of this vulnerability may cause the system to restart...
Design/Logic Flaw
DoS vulnerability in the PMS module. Successful exploitation of this vulnerability may cause the system to restart...
CVE-2023-41301
Vulnerability of unauthorized API access in the PMS module. Successful exploitation of this vulnerability may cause features to perform abnormally...
CVE-2023-41301
CVE-2023-41301 describes a vulnerability in the PMS module enabling unauthorized API access, with exploitation potentially causing features to behave abnormally. The NVD entry lists a CVSS v3.1 base score of 7.5 (HIGH), with network attack vector, no privileges required, no user interaction, and ...
CVE-2023-41300
Vulnerability of parameters not being strictly verified in the PMS module. Successful exploitation of this vulnerability may cause the system to restart...
CVE-2023-41300
CVE-2023-41300 relates to Huawei HarmonyOS, where the PMS module has lax parameter verification. The issue can be triggered remotely (network vector, no user interaction) and may lead to a system restart; CVSSv3.1 base score 7.5 HIGH. Connected sources corroborate the description and link to Harm...
CVE-2023-41299
DoS vulnerability in the PMS module. Successful exploitation of this vulnerability may cause the system to restart...
CVE-2023-41299
DoS vulnerability in the PMS module. Successful exploitation of this vulnerability may cause the system to restart...
CVE-2023-41299
Huawei HarmonyOS vulnerability CVE-2023-41299 is described in connected sources as a DoS in the PMS module that can cause a system restart. The available documents identify the affected product as HarmonyOS (PMS component) and the impact as availability disruption, but they do not provide specifi...
CVE-2023-39409
DoS vulnerability in the PMS module. Successful exploitation of this vulnerability may cause the system to restart...
Design/Logic Flaw
DoS vulnerability in the PMS module. Successful exploitation of this vulnerability may cause the system to restart...
CVE-2023-39409
DoS vulnerability in the PMS module. Successful exploitation of this vulnerability may cause the system to restart...
CVE-2023-39409
CVE-2023-39409 describes a DoS in the PMS module, impacting Huawei HarmonyOS (PMS component). Exploitation can cause the system to restart/reboot, per NVD and CNNVD notes. The CVSSv3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) yields a base score of 7.5 (HIGH) with no confidentiality or integr...