CVE-2026-15153

The WP Hotel Booking WordPress plugin before 2.3.2 does not sanitise and escape a search parameter on an administrative listing before using it in a SQL query, allowing users holding the WP Hotel Booking WordPress plugin before 2.3.2's booking-management roles to perform SQL injection attacks...

EUVD-2026-50990

The WP Hotel Booking WordPress plugin before 2.3.2 does not sanitise and escape a search parameter on an administrative listing before using it in a SQL query, allowing users holding the WP Hotel Booking WordPress plugin before 2.3.2's booking-management roles to perform SQL injection attacks...

CVE-2026-15153

The WP Hotel Booking WordPress plugin before 2.3.2 does not sanitise and escape a search parameter on an administrative listing before using it in a SQL query, allowing users holding the WP Hotel Booking WordPress plugin before 2.3.2's booking-management roles to perform SQL injection attacks...

PT-2026-66393

The WP Hotel Booking WordPress plugin before 2.3.2 does not sanitise and escape a search parameter on an administrative listing before using it in a SQL query, allowing users holding the WP Hotel Booking WordPress plugin before 2.3.2's booking-management roles to perform SQL injection attacks...

EUVD-2026-23434

A vulnerability was detected in arnobt78 Hotel Booking Management System up to f8922d0e0f6ac1cc761974c7616f44c2bbc04bea. The impacted element is an unknown function of the file /api/health/detailed of the component Health Check Endpoint. Performing a manipulation results in information disclosure...

CVE-2023-49988

Hotel Booking Management v1.0 was discovered to contain a SQL injection vulnerability via the npss parameter at rooms.php...

CVE-2023-49989

Hotel Booking Management v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at update.php...

EUVD-2025-13286

Malicious code in bioql PyPI...

EUVD-2021-31801

Malicious code in bioql PyPI...

EUVD-2021-29203

Malicious code in bioql PyPI...

EUVD-2024-33178

Malicious code in bioql PyPI...

EUVD-2025-12073

Malicious code in bioql PyPI...

PT-2025-33262 · Unknown · Campcodes Online Flight Booking Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Flight Booking Management System version 1.0 Description: A vulnerability exists in Campcodes Online Flight Booking Management System 1.0, specifically within an unknown functionality of the /admin/save airlines.php file...

CVE-2025-50699

PHPGurukul Online DJ Booking Management System 2.0 is vulnerable to Cross Site Scripting XSS in odms/admin/view-user-queries.php...

CVE-2025-50699

PHPGurukul Online DJ Booking Management System 2.0 contains a Cross-Site Scripting (XSS) flaw in odms/admin/view-user-queries.php. CVSS v3.1 base score 6.1 (MEDIUM) with NETWORK attack vector, no privileges required, user interaction required, and changed scope; impact: Confidentiality Low, Integ...

CVE-2025-50695

PHPGurukul Online DJ Booking Management System 2.0 is vulnerable to Cross Site Scripting XSS in /admin/view-booking-detail.php and /admin/invoice-generating.php...

CVE-2025-50693

PHPGurukul Online DJ Booking Management System 2.0 is vulnerable to Insecure Direct Object Reference IDOR in odms/request-details.php...

CVE-2025-50699

PHPGurukul Online DJ Booking Management System 2.0 is vulnerable to Cross Site Scripting XSS in odms/admin/view-user-queries.php...

CVE-2024-51075

A Reflected Cross Site Scripting XSS vulnerability was found in /odms/admin/user-search.php in PHPGurukul Online DJ Booking Management System v1.0, which allows remote attackers to execute arbitrary code via the searchdata parameter...

CVE-2021-45003

Laundry Booking Management System 1.0 Latest and previous versions are affected by a remote code execution RCE vulnerability in profile.php through the "image" parameter that can execute a webshell payload...