2983 matches found
CVE-2020-9372: Improper Neutralization of Formula Elements in a CSV File
The Appointment Booking Calendar plugin before 1.3.35 for WordPress allows user input in fields such as Description or Name in any booking form to be any formula, which then could be exported via the Bookings list tab in /wp-admin/admin.php?page=cpabcappointments.php. The attacker could achieve...
Online Clinic Management System 2.2 - HTML Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Online Clinic Management System 2.2 - HTML Injection Exploit Author: Cemal Cihad ÇİFTÇİ Vendor Homepage: https://bigprof.com Software Download Link : https://bigprof.com/appgini/applications/online-clinic-management-system...
Online Appointment SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Online Appointment SQL Injection Data: 07.09.2019 Exploit Author: mohammad zaheri Vendor HomagePage: https://github.com/girish03/Online-Appointment-Booking-System Tested on: Windows Google Dork: N/A ========= Vulnerable Page:...
Online Appointment - SQL Injection
Online Appointment - SQL Injection Exploit Title: Online Appointment SQL Injection Data: 07.09.2019 Exploit Author: mohammad zaheri Vendor HomagePage: https://github.com/girish03/Online-Appointment-Booking-System Tested on: Windows Google Dork: N/A ========= Vulnerable Page: =========...
Online Appointment - SQL Injection
Exploit Title: Online Appointment SQL Injection Data: 07.09.2019 Exploit Author: mohammad zaheri Vendor HomagePage: https://github.com/girish03/Online-Appointment-Booking-System Tested on: Windows Google Dork: N/A ========= Vulnerable Page: =========...
WordPress appointment-booking-calendar plugin SQL injection vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. appointment-booking-calendar is an online appointment management plugin used in it. A SQL injection vulnerability exists in the...
CVE-2016-10916
The appointment-booking-calendar plugin before 1.1.24 for WordPress has SQL injection, a different vulnerability than CVE-2015-7319...
Sql injection
The appointment-booking-calendar plugin before 1.1.24 for WordPress has SQL injection, a different vulnerability than CVE-2015-7319...
CVE-2016-10916
CVE-2016-10916 affects the WordPress Appointment Booking Calendar plugin, with SQL injection in versions prior to 1.1.24. The three Red Hat/NVD/CNVD-style entries confirm an unauthenticated SQL injection vulnerability that can allow an attacker to execute arbitrary SQL commands (network access). ...
PT-2019-7712
Name of the Vulnerable Software and Affected Versions appointment-booking-calendar plugin versions prior to 1.1.24 Description The issue is related to SQL injection. Recommendations For versions prior to 1.1.24, update to version 1.1.24 or later to resolve the issue...
CVE-2016-10916: Improper Neutralization of Special Elements used in an SQL Command
The appointment-booking-calendar plugin before 1.1.24 for WordPress has SQL injection, a different vulnerability than CVE-2015-7319...
WordPress Appointment Booking Calendar plugin cross-site scripting vulnerability (CNVD-2019-27684)
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Appointment Booking Calendar is a booking plugin used in it. A cross-site scripting vulnerability exists in the WordPress Appointment...
CVE-2019-14791
The Appointment Booking Calendar plugin 1.3.18 for WordPress allows XSS via the wp-admin/admin-post.php editionarea parameter...
CVE-2019-14791
The Appointment Booking Calendar plugin 1.3.18 for WordPress allows XSS via the wp-admin/admin-post.php editionarea parameter...
CVE-2019-14791
CVE-2019-14791 affects the WordPress plugin Appointment Booking Calendar (version 1.3.18). The vulnerability is an XSS in the wp-admin/admin-post.php editionarea parameter via the cpabc_appointments_save_edition() flow, caused by lack of authorization checks for cfwpp_edit values (e.g., js or css...
CVE-2019-14791: Improper Neutralization of Input During Web Page Generation
The Appointment Booking Calendar plugin 1.3.18 for WordPress allows XSS via the wp-admin/admin-post.php editionarea parameter...
PT-2019-13836
Name of the Vulnerable Software and Affected Versions Appointment Booking Calendar plugin version 1.3.18 Description The issue allows for XSS via the editionarea parameter in the "wp-admin/admin-post.php" API endpoint. Recommendations For Appointment Booking Calendar plugin version 1.3.18, consid...
WordPress Appointment Hour Booking plugin <= 1.1.45 - Stored Cross-Site Scripting (XSS) vulnerability
Stored Cross-Site Scripting XSS vulnerability found by ivoschyk-cs in WordPress Appointment Hour Booking plugin versions = 1.1.45. Solution Update the WordPress Appointment Hour Booking plugin to the latest available version at least 1.1.46...
WordPress Appointment Hour Booking Plugin Cross-Site Scripting Vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Appointment Hour Booking plugin is an online booking plugin used in it. A cross-site scripting vulnerability exists in WordPress...