6 matches found
CVE-2023-29809
Título do Exploit: Injeção de SQL não autenticada Google Dork: Data: 27.04.2023 Autor do Exploit: Lucas Noki 0xPrototype Página inicial do fornecedor: https://github.com/vogtmh Link do software: https://github.com/vogtmh/cmaps Versão: 8.0 Testado em: Mac, Windows, Linux CVE : CVE-2023-29809...
Yacht Listing Script Security Vulnerability
Yacht Listing Script is yacht and boat classification software. A security vulnerability exists in Yacht Listing Script v1.0. An attacker exploited the vulnerability to export a customer's credit card number from the booking module...
CVE-2022-32026
Car Rental Management System v1.0 is vulnerable to SQL Injection via /car-rental-management-system/admin/managebooking.php?id=...
PT-2022-11957 · Lorensbergs · Lorensbergs Connect2
Name of the Vulnerable Software and Affected Versions: Lorensbergs Connect2 version 3.13.7647.20190 Description: The issue concerns an XSS vulnerability that requires administrator privileges to exploit. It is performed through the Wizard editor of the application, where an administrator must ent...
city-oberland.ch XSS vulnerability
Vulnerable URL: https://www.city-oberland.ch/booking/modules/hotelextended/calendar.php?arrive=1〈=en=22%3E%3Cimg%20src=x%20onerror=alert/OPENBUGBOUNTY/%3E30=07=city-oberland=Y-m-d=arrive= Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicl...