ReDi Restaurant Reservations < 21.0426 - Unauthenticated Stored Cross-Site Scripting (XSS)

The ReDi Restaurant Reservations plugin provides the functionality to let users make restaurant reservations. These reservations are stored and can be listed on an 'Upcoming' page provided by the plugin. An unauthenticated user can fill in the form to make a restaurant reservation. The form to ma...

SUSE-SU-2021:0139-1 Security update for slurm_20_02

This update for slurm2002 fixes the following issues: Updated to 20.02.6, addresses two security fixes: PMIx - fix potential buffer overflows from use of unpackmem. CVE-2020-27745 bsc1178890 X11 forwarding - fix potential leak of the magic cookie when sent as an argument to the xauth command...

reservations.apartmani-medena.hr Cross Site Scripting vulnerability OBB-1462927

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

pointloma.fishingreservations.net Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1020094 Security Researcher Gh05tPT Helped patch 6884 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting...

cedros.fishingreservations.net Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1020041 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

WordPress nd-restaurant-reservations plugin has an unspecified vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. nd-restaurant-reservations is a restaurant reservation management plugin used in it. A security vulnerability exists in WordPress...

CVE-2019-15819

The nd-restaurant-reservations plugin before 1.5 for WordPress has no requirement for ndrstimportsettingsphpfunction authentication...

Authentication flaw

The nd-restaurant-reservations plugin before 1.5 for WordPress has no requirement for ndrstimportsettingsphpfunction authentication...

CVE-2019-15819

The CVE-2019-15819 affects the WordPress plugin nd-restaurant-reservations, version prior to 1.5. The root cause is missing authentication for the nd_rst_import_settings_php_function, enabling unauthorized configuration changes. Public records indicate potential impact such as modification of log...

WordPress Restaurant Reservations plugin <= 1.3 - Unauthenticated Options Change vulnerability

Unauthenticated Options Change vulnerability found by Jerome Bruandet Nintechnet in WordPress Restaurant Reservations plugin versions = 1.3. Solution Update the WordPress Restaurant Reservations plugin to the latest available version at least 1.5...

ND Restaurant Reservations <= 1.3 - Unauthenticated Options Change

The Restaurant Reservations WordPress plugin was affected by an Unauthenticated Options Change security vulnerability...

Joomla JMultipleHotelReservation 6.0.7 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component J-MultipleHotelReservation 6.0.7 - SQL Injection Exploit Author: Ihsan Sencan Vendor Homepage: http://cmsjunkie.com/ Software Link:...

Marriott breach impacts 500 million customers: here’s what to do about it

Today Marriott disclosed a large-scale data breach impacting up to 500 million customers who have stayed at a Starwood-branded hotel within the last four years. While details of the breach are still sparse, Marriott stated that there was unauthorized access to a database tied to customer...

Marriott: Data on 500 Million Guests Stolen in 4-Year Breach

Hospitality giant Marriott today disclosed a massive data breach exposing the personal and financial information on as many as a half billion customers who made reservations at any of its Starwood properties over the past four years. Marriott said the breach involved unauthorized access to a...

moonlightmotelanaheim.com XSS vulnerability

Open Bug Bounty ID: OBB-674320 Description| Value ---|--- Affected Website:| moonlightmotelanaheim.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

reservations.travelclick.com XSS vulnerability

Open Bug Bounty ID: OBB-663988 Description| Value ---|--- Affected Website:| reservations.travelclick.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

prefecturahr.ro Improper Access Control vulnerability

Open Bug Bounty ID: OBB-656549 Description| Value ---|--- Affected Website:| prefecturahr.ro Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

reservations.clubsolaris.com XSS vulnerability

Open Bug Bounty ID: OBB-655583 Description| Value ---|--- Affected Website:| reservations.clubsolaris.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

southerncomfortbandb.com XSS vulnerability

Open Bug Bounty ID: OBB-629466 Description| Value ---|--- Affected Website:| southerncomfortbandb.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

le-fruitdelapassion.com XSS vulnerability

Open Bug Bounty ID: OBB-625129 Description| Value ---|--- Affected Website:| le-fruitdelapassion.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...