reservations.santeelakes.com XSS vulnerability

Open Bug Bounty ID: OBB-258533 Description| Value ---|--- Affected Website:| reservations.santeelakes.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS...

reservations.donpedrolake.com XSS vulnerability

Open Bug Bounty ID: OBB-256673 Description| Value ---|--- Affected Website:| reservations.donpedrolake.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

fortrosslodge.com XSS vulnerability

Open Bug Bounty ID: OBB-256048 Description| Value ---|--- Affected Website:| fortrosslodge.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

reservations.posadas.com XSS vulnerability

Vulnerable URL: http://reservations.posadas.com/portal/Availability/busquedaDisponibilidad.do/"--!" Details: Description| Value ---|--- Patched:| Yes, at 27.11.2017 Latest check for patch:| 27.11.2017 09:02 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown...

sassi.biz XSS vulnerability

Vulnerable URL: http://www.sassi.biz/reservations.php?earlyres=easter=1"...

reservations.slocountyparks.com XSS vulnerability

Vulnerable URL: http://reservations.slocountyparks.com/reservations/SiteDetails.asp?arrivedate=5/9/2017=1"...

mammothreservations.com XSS vulnerability

Vulnerable URL: http://www.mammothreservations.com/browsebygeneric.php?room=ID=WF=1/-///'/"//--...

reservations.lanecounty.org XSS vulnerability

Vulnerable URL: https://reservations.lanecounty.org/reservations/passsales.asp?actiontype=displayproduct"'--! Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculate...

Breach at Sabre Corp.’s Hospitality Unit

Breaches involving major players in the hospitality industry continue to pile up. Today, travel industry giant Sabre Corp. disclosed what could be a significant breach of payment and customer data tied to bookings processed through a reservations system that serves more than 32,000 hotels and oth...

reservations.mahan.aero XSS vulnerability

Vulnerable URL: http://reservations.mahan.aero/ibe/public/showFlightSchedule.action?startDate=05%2F2014=THR=KSH=true〈=fa";alert'OPENBUGBOUNTY';=" Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 23:12 GMT Vulnerability type:| XSS Vulnerability...

taxilimo.ca XSS vulnerability

Vulnerable URL: https://www.taxilimo.ca/schoolreservations.php?AccountNumber=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 18594883...

reservations.choruscall.in XSS vulnerability

Vulnerable URL: http://reservations.choruscall.in/india/login.php?Msg=%22%3E%3Csvg/onload=confirm%28/xssposed/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

JVN#17522792: yoyaku_v41 vulnerable to OS command injection

yoyakuv41 provided by Webservice-DIC is a software to manage conference room reservations. yoyakuv41 contains an OS command injection vulnerability CWE-78. Impact An arbitrary OS command may be executed with the privileges of the web server on the server where yoyakuv41 is running. Solution Do no...

CVE-2015-3359

Multiple cross-site scripting XSS vulnerabilities in the Room Reservations module before 7.x-1.1 for Drupal allow remote authenticated users with the "Administer the room reservations system" permission to inject arbitrary web script or HTML via the 1 node title of a "Room Reservations Category" ...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Room Reservations module before 7.x-1.1 for Drupal allow remote authenticated users with the "Administer the room reservations system" permission to inject arbitrary web script or HTML via the 1 node title of a "Room Reservations Category" ...

CVE-2015-3359

Summary: CVE-2015-3359 concerns multiple XSS vulnerabilities in the Drupal Room Reservations module (7.x-1.x) prior to 7.x-1.1. Affected component: Room Reservations module for Drupal 7.x. Root cause: module fails to sufficiently sanitize input in the node title of Room Reservations Category and ...

CVE-2015-3359

Multiple cross-site scripting XSS vulnerabilities in the Room Reservations module before 7.x-1.1 for Drupal allow remote authenticated users with the "Administer the room reservations system" permission to inject arbitrary web script or HTML via the 1 node title of a "Room Reservations Category" ...

Multiple Cross-Site Scripting Vulnerabilities in Drupal Room Reservations Module

Drupal is a free and open source content management system developed in PHP. Multiple cross-site scripting vulnerabilities exist in the Drupal Room Reservations module because it fails to properly filter user-supplied input. An attacker could use these vulnerabilities to execute arbitrary script...

Parking Services Confirm Payment Card Breaches

Two services that allow users to reserve over the Internet offsite parking spots at airports confirmed week that they recently suffered data breaches and customer data may be at risk. Park ‘N Fly, headquartered in Atlanta, and OneStopParking, which is based in Florence, Ky, allow travelers to...

mySeatXT 0.2134 - SQL Injection

No description provided by source. + Exploit: mySeatXT 0.2134 + Author: vinicius777 + Contact: vinicius777 AT gmail @vinicius777 + Vendor Homepage: http://sourceforge.net/projects/myseat 1 Sql Injection PoC: http://localhost/mySeatXT/web/ajax/autocompleteres.php?term=99' 'SQL INJECT' Vulnerable...