Unspecified Vulnerability in Oracle Hospitality Suite 8 (CNVD-2017-30884)

Oracle Hospitality Applications is a suite of business applications, servers, and storage solutions for hospitality management from Oracle Corporation.Hospitality Suite8 is one of the advanced customer management components. An unspecified vulnerability exists in the PMS component of Oracle...

CVE-2017-10228

Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications subcomponent: Module. The supported version that is affected is 8.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2017-10228

Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications subcomponent: Module. The supported version that is affected is 8.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2017-10056

Vulnerability in the Oracle Hospitality 9700 component of Oracle Hospitality Applications subcomponent: Property Management Systems. The supported version that is affected is 4.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle...

Buffer overflow

Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications subcomponent: Module. The supported version that is affected is 8.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2017-10228

Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications subcomponent: Module. The supported version that is affected is 8.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2017-10228

Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications subcomponent: Module. The supported version that is affected is 8.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2017-10056

Affected product: Oracle Hospitality 9700, subcomponent Property Management Systems, version 4.0. Vulnerability allows a low-privilege, logged-on attacker to compromise Oracle Hospitality 9700, potentially leading to unauthorized access to data or complete access to all data. CVSS v3.0 base score...

CVE-2017-10228

The CVE-2017-10228 entry covers Oracle Hospitality Cruise Shipboard Property Management System (Module) version 8.0.0.0. The vulnerability allows a low-privilege, network-access attacker (HTTP) to modify or delete some data and to read additional data in the system. This is identified with CVSS v...

Oracle Hospitality Cruise Shipboard Property Management System Remote Vulnerability

Oracle Hospitality Applications is a suite of business applications, servers, and storage solutions for hospitality management from Oracle Corporation. The solution provides human resource cost management, tracking and management of services throughout a customer's journey to improve customer...

Unspecified Vulnerability in Oracle Hospitality 9700

Oracle Hospitality Applications is a suite of business applications, servers, and storage solutions for hospitality management from Oracle.Hospitality 9700 is one of the hospitality management components. A security vulnerability exists in the Property Management Systems subcomponent of the...

Joomla com_ jomres SQL injection Vulnerability

Exploit for php platform in category web applications Exploit Title : Joomla com jomres SQL injection Vulnerability Exploit Author : xBADGIRL21 Dork : index.php?option=com jomres "propertyuid" Software link : https://www.jomres.net/files/jomresjoomlacomponentinstaller.zip Vendor Homepage :...

alphapropertymanagement.co.nz XSS vulnerability

Vulnerable URL: http://www.alphapropertymanagement.co.nz/searchlisting.php?listingtype=1%22--%3E%3Csvg/onload=;prompt/OPENBUGBOUNTY/;%3E2 Details: Description| Value ---|--- Patched:| Yes, at 19.06.2017 Latest check for patch:| 19.06.2017 07:36 GMT Vulnerability type:| XSS Vulnerability status:|...

propertymanagementmiassoc.wliinc32.com Open Redirect vulnerability

Vulnerable URL: http://propertymanagementmiassoc.wliinc32.com/CWT/External/WCPages/WCBanners/BannerReferral.aspx?ProfileID=12847=32=0=http://xssposed.org Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 12:39 GMT Vulnerability type:| Open Redire...

WP Property <= 1.38.3.2 - Non-administrative User XMLI Remote Information Disclosure

The WP-Property – WordPress Powered Real Estate and Property Management WordPress plugin was affected by a Non-administrative User XMLI Remote Information Disclosure security vulnerability...

SynConnect PMS (index.php, loginid param) - SQL Injection Vulnerability

No description provided by source. Title: ==== SynConnect - SQL Injection vulnerability Credit: ====== Name: Bhadresh Patel Company/affiliation: Cyberoam Technologies Private Limited Website: www.cyberoam.com CVE: ===== Date: ==== 01-03-2013 CRD: ==== CRD-2013-01 Vendor: ====== Synchroweb...

Wordpress WP-Property Plugin 1.35.0 - Arbitrary File Upload

No description provided by source. Description : Wordpress Plugins - WP-Property - WordPress Powered Real Estate and Property Management Shell Upload Vulnerability Version : 1.35.0 Link : http://wordpress.org/extend/plugins/wp-property/ Plugins :...

Hoteldruid (PHP-residence) v1.X.X (SQLi/LFI) Multiple Vulenrabilities

Exploit for php platform in category web applications + Author: TUNISIAN CYBER + Exploit Title: Hoteldruid PHP-residence v1.X.X SQLi/LFI Multiple Vulenrabilities + Date: 14-12-2013 + Category: WebApp + Vendor: http://www.hoteldruid.com/en/download.html + Google Dork: inurl:"mostrasorgente.php" +...

SynConnect Pms - index.php?loginid SQL Injection

SynConnect Pms - index.php?loginid SQL Injection Title: ==== SynConnect - SQL Injection vulnerability Credit: ====== Name: Bhadresh Patel Company/affiliation: Cyberoam Technologies Private Limited Website: www.cyberoam.com CVE: ===== Date: ==== 01-03-2013 CRD: ==== CRD-2013-01 Vendor: ======...

SynConnect PMS - SQL Injection Vulnerability

Exploit for php platform in category web applications Synchroweb Technology is a provider of application software, hardware and other innovative enterprise technology. They strive in development, deployment, and management of Linux and open source solutions for Internet infrastructure ranging fro...