CVE-2023-44163 Online Movie Ticket Booking System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

The 'search' parameter of the processsearch.php resource does not validate the characters received and they are sent unfiltered to the database...

CVE-2023-44173

Online Movie Ticket Booking System v1.0 is vulnerable to an authenticated Reflected Cross-Site Scripting vulnerability...

CVE-2023-44174 Online Movie Ticket Booking System v1.0 - Stored Cross-Site Scripting (XSS)

Online Movie Ticket Booking System v1.0 is vulnerable to an authenticated Stored Cross-Site Scripting vulnerability...

CVE-2023-44174

CVE-2023-44174 affects the Online Movie Ticket Booking System v1.0. The vulnerability is an authenticated Stored Cross-Site Scripting (XSS) in the web application’s input handling, allowing malicious scripts to be stored and executed in the context of other authenticated users. According to the a...

CVE-2023-44173 Online Movie Ticket Booking System v1.0 - Reflected Cross-Site Scripting (XSS)

Online Movie Ticket Booking System v1.0 is vulnerable to an authenticated Reflected Cross-Site Scripting vulnerability...

PT-2023-29145 · Unknown · Online Movie Ticket Booking System

Name of the Vulnerable Software and Affected Versions: Online Movie Ticket Booking System version 1.0 Description: The Online Movie Ticket Booking System is affected by an authenticated Stored Cross-Site Scripting issue. This allows attackers to inject malicious scripts into the system, potential...

CVE-2023-39424

A vulnerability in RDPngFileUpload.dll, as used in the IRM Next Generation booking system, allows a remote attacker to upload arbitrary content such as a web shell component to the SQL database and execute it with SYSTEM privileges. This vulnerability requires authentication to be exploited but c...

Cinema Booking System 1.0 Cross Site Scripting Vulnerability

Title: Cinema Booking System-1.0 XSS-Reflected Author: nu11secur1ty Vendor: https://www.phpjabbers.com/ Software: https://www.phpjabbers.com/car-rental-script/ Reference: https://portswigger.net/web-security/sql-injection Description: The name of an arbitrarily supplied URL parameter is copied in...

CVE-2023-40760

User enumeration is found in PHP Jabbers Hotel Booking System v4.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users...

CVE-2023-40760

User enumeration is found in PHP Jabbers Hotel Booking System v4.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users...

Design/Logic Flaw

User enumeration is found in PHP Jabbers Hotel Booking System v4.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users...

Hotel Booking System 安全漏洞

Hotel Booking System is a hotel booking system. A security vulnerability exists in PHPJabbers Hotel Booking System version v4.0, which stems from a user enumeration vulnerability during password reset...

CVE-2023-40760

PHP Jabbers Hotel Booking System v4.0 is affected by a user enumeration vulnerability observed during password recovery, where message differences can reveal whether a username exists, enabling brute-force attempts with valid accounts. The issue is described across multiple sources as a user enum...

PT-2023-27625 · Phpjabbers · Phpjabbers Hotel Booking System

Name of the Vulnerable Software and Affected Versions: PHP Jabbers Hotel Booking System version 4.0 Description: The issue is related to user enumeration, which occurs during the password recovery process. A difference in messages could allow an attacker to determine if a user is valid or not,...

CVE-2023-40760

User enumeration is found in PHP Jabbers Hotel Booking System v4.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users...

WordPress Pinpoint Booking System Plugin <= 2.9.9.3.4 is vulnerable to Content Spoofing

Software Pinpoint Booking System Type Plugin Vulnerable versions = 2.9.9.3.4 Fixed in 2.9.9.3.5 OWASP Top 10 A1: Injection Classification Content Spoofing CVE CVE-2023-38520 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID b94b02c0ce93 Credits yuyudhn Required privilege...

WordPress Salon booking system Plugin <= 8.4.7 is vulnerable to Cross Site Scripting (XSS)

Software Salon booking system Type Plugin Vulnerable versions = 8.4.7 Fixed in 8.4.9 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 36c49c980842 Credits Rafie Muhammad Patchstack...

CVE-2023-3564

A vulnerability was found in GZ Scripts GZ Multi Hotel Booking System 1.8. It has been classified as problematic. Affected is an unknown function of the file /index.php. The manipulation of the argument adults/children/calid leads to cross site scripting. It is possible to launch the attack...

Cross site scripting

A vulnerability was found in GZ Scripts GZ Multi Hotel Booking System 1.8. It has been classified as problematic. Affected is an unknown function of the file /index.php. The manipulation of the argument adults/children/calid leads to cross site scripting. It is possible to launch the attack...

GZ Scripts GZ Multi Hotel Booking System 跨站脚本漏洞

GZ Scripts GZ Multi Hotel Booking System is a hotel booking system from GZ Scripts. A cross-site scripting vulnerability exists in GZ Scripts GZ Multi Hotel Booking System, which stems from an unknown issue with /index.php...