WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.5.3 - Arbitrary File Upload leading to RCE

Arbitrary File Upload leading to RCE discovered by Huli Cymetrics in WordPress VikBooking Hotel Booking Engine & PMS plugin versions = 1.5.3. Solution Update the WordPress VikBooking Hotel Booking Engine & PMS plugin to the latest available version at least 1.5.4...

CVE-2018-17842

SQL injection exists in Scriptzee Hotel Booking Engine 1.0 via the hotels hroomtype parameter...

CVE-2018-17842

SQL injection exists in Scriptzee Hotel Booking Engine 1.0 via the hotels hroomtype parameter...

Sql injection

SQL injection exists in Scriptzee Hotel Booking Engine 1.0 via the hotels hroomtype parameter...

CVE-2018-17842

CVE-2018-17842 affects Scriptzee Hotel Booking Engine 1.0, with a SQL injection vulnerability exposed via the hotels h_room_type parameter. The vulnerability allows potentially unauthorized access to data and manipulation of the backend database. According to NVD, the CVSS scores are CVSSv3.1: 9....

CVE-2018-17842

SQL injection exists in Scriptzee Hotel Booking Engine 1.0 via the hotels hroomtype parameter...

CVE-2018-17842: Improper Neutralization of Special Elements used in an SQL Command

SQL injection exists in Scriptzee Hotel Booking Engine 1.0 via the hotels hroomtype parameter...

PT-2019-9526

Name of the Vulnerable Software and Affected Versions Scriptzee Hotel Booking Engine version 1.0 Description A SQL injection issue exists, allowing potential exploitation via the h room type parameter in the hotels endpoint. Recommendations For Scriptzee Hotel Booking Engine version 1.0, avoid...

Hotel Booking Engine 1.0 - h_room_type SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Hotel Booking Engine 1.0 - 'hroomtype' SQL Injection Exploit Author: Ihsan Sencan Vendor Homepage: http://scriptzee.com/ Software Link: http://scriptzee.com/products/details/35 Version: 1.0 Category: Webapps Tested on:...

Hotel Booking Engine 1.0 SQL Injection

Exploit Title: Hotel Booking Engine 1.0 - 'hroomtype' SQL Injection Dork: N/A Exploit Author: Ihsan Sencan Date: 2018-10-01 Vendor Homepage: http://scriptzee.com/ Software Link: http://scriptzee.com/products/details/35 Version: 1.0 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: CVE-N/A PO...

Professional Service Booking Software 1.0 SQL Injection

Exploit Title: Professional Service Booking Software 1.0 - SQL Injection Dork: N/A Date: 09.09.2017 Vendor Homepage: http://scriptzee.com/ Software Link: http://scriptzee.com/best-softwares/professional-service-booking-engine Demo: http://professionalservice.scriptzee.com/ Version: 1.0 Category:...

HotelCMS with Booking Engine - SQL injection vulnerability

http://localhost/PATH/locale? locale=SQL the locale parameter there is sql injection Wherein the error injection as follows: payload: http://localhost/PATH/locale? locale=1' AND SELECT 3507 FROMSELECT COUNT,CONCATFLOORRAND02,md5233x FROM INFORMATIONSCHEMA. The PLUGINS GROUP BY xa-- Lilt Test...

HotelCMS with Booking Engine - SQL Injection

HotelCMS with Booking Engine - SQL Injection Exploit Title: HotelCMS with Booking Engine - SQL Injection Google Dork: N/A Date: 10.02.2017 Vendor Homepage: http://codepaul.com/ Software Buy: https://codecanyon.net/item/hotelcms-with-booking-engine/12789671 Demo: http://codepaul.com/hotelcms/...

HotelCMS with Booking Engine - SQL Injection

Exploit Title: HotelCMS with Booking Engine - SQL Injection Google Dork: N/A Date: 10.02.2017 Vendor Homepage: http://codepaul.com/ Software Buy: https://codecanyon.net/item/hotelcms-with-booking-engine/12789671 Demo: http://codepaul.com/hotelcms/ Version: N/A Tested on: Win7 x64, Kali Linux x64...

CultBooking 2.0.4 Multiple Vulnerabilities

Exploit for php platform in category web applications CultBooking 2.0.4 lang Local File Inclusion Vulnerability Vendor: Cultuzz Digital Media GmbH Product web page: http://www.cultuzz.com Affected version: 2.0.4 Summary: Open source hotel booking system Internet Booking Engine IBE. Via a central...

obe-sql.txt

Online Booking engine userid SQL Injection Vulnerability Author: d3b4g Home : www.mvtechies.com email: bl4ckendatgmaildotcom HomE script : http://bookingengine.galaxyweblinks.com/ Risk: High DorK : N/A ------------------------------------------------------------- Exploit:...