77 matches found
CVE-2023-49989
CVE-2023-49989 Hotel Booking Management v1.0 - update.php の "id" パラメータにおける SQL インジェクションの脆弱性 説明 : Hotel Booking Management v1.0 は、update.php の id パラメータを介して SQL インジェクションの脆弱性を含むことが発見されました。 脆弱性のある製品バージョン : Hotel Booking Management v1.0 CVE 作成者 : Geraldo Alcântara 日付 : 28/11/2023 確認日 : 19/12/2023 CVE ...
CVE-2023-49988
CVE-2023-49988 Hotel Booking Management v1.0 - rooms.php의 "npss" 매개변수에서 SQL 인젝션 취약점 설명 : Hotel Booking Management 버전 1에 SQL 인젝션 취약점이 존재합니다. 악의적인 공격자는 취약한 매개변수 npss, dpss, npsd, dpsd, npds, dpds, npdd, dpdd, npdst 또는 dpdst를 통해 숙박 옵션의 가격 및 할인을 수정할 때 MySQL 데이터베이스에 SQL 명령을 실행할 수 있습니다. 취약한 제품 버전 : Hot...
CVE-2026-15153
The WP Hotel Booking WordPress plugin before 2.3.2 does not sanitise and escape a search parameter on an administrative listing before using it in a SQL query, allowing users holding the WP Hotel Booking WordPress plugin before 2.3.2's booking-management roles to perform SQL injection attacks...
EUVD-2026-50990
The WP Hotel Booking WordPress plugin before 2.3.2 does not sanitise and escape a search parameter on an administrative listing before using it in a SQL query, allowing users holding the WP Hotel Booking WordPress plugin before 2.3.2's booking-management roles to perform SQL injection attacks...
CVE-2026-15153
The WP Hotel Booking WordPress plugin before 2.3.2 does not sanitise and escape a search parameter on an administrative listing before using it in a SQL query, allowing users holding the WP Hotel Booking WordPress plugin before 2.3.2's booking-management roles to perform SQL injection attacks...
PT-2026-66393
The WP Hotel Booking WordPress plugin before 2.3.2 does not sanitise and escape a search parameter on an administrative listing before using it in a SQL query, allowing users holding the WP Hotel Booking WordPress plugin before 2.3.2's booking-management roles to perform SQL injection attacks...
EUVD-2026-23434
A vulnerability was detected in arnobt78 Hotel Booking Management System up to f8922d0e0f6ac1cc761974c7616f44c2bbc04bea. The impacted element is an unknown function of the file /api/health/detailed of the component Health Check Endpoint. Performing a manipulation results in information disclosure...
CVE-2023-49988
Hotel Booking Management v1.0 was discovered to contain a SQL injection vulnerability via the npss parameter at rooms.php...
CVE-2023-49989
Hotel Booking Management v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at update.php...
EUVD-2024-33178
Malicious code in bioql PyPI...
EUVD-2025-13286
Malicious code in bioql PyPI...
EUVD-2021-31801
Malicious code in bioql PyPI...
EUVD-2021-29203
Malicious code in bioql PyPI...
EUVD-2025-12073
Malicious code in bioql PyPI...
PT-2025-33262 · Unknown · Campcodes Online Flight Booking Management System
Name of the Vulnerable Software and Affected Versions: Campcodes Online Flight Booking Management System version 1.0 Description: A vulnerability exists in Campcodes Online Flight Booking Management System 1.0, specifically within an unknown functionality of the /admin/save airlines.php file...
CVE-2025-50699
PHPGurukul Online DJ Booking Management System 2.0 is vulnerable to Cross Site Scripting XSS in odms/admin/view-user-queries.php...
CVE-2025-50699
PHPGurukul Online DJ Booking Management System 2.0 contains a Cross-Site Scripting (XSS) flaw in odms/admin/view-user-queries.php. CVSS v3.1 base score 6.1 (MEDIUM) with NETWORK attack vector, no privileges required, user interaction required, and changed scope; impact: Confidentiality Low, Integ...
CVE-2025-50695
PHPGurukul Online DJ Booking Management System 2.0 is vulnerable to Cross Site Scripting XSS in /admin/view-booking-detail.php and /admin/invoice-generating.php...