CVE-2017-2168

Cross-site scripting vulnerability in WP Booking System Free version prior to version 1.4 and WP Booking System Premium version prior to version 3.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2017-2168

The CVE-2017-2168 entry maps to the WordPress plugin WP Booking System. A stored cross-site scripting (XSS) vulnerability exists in WP Booking System Free versions prior to 1.4 and Premium versions prior to 3.7, allowing remote attackers to inject arbitrary scripts via unspecified vectors. Impact...

WordPress WP Booking System Plugin Cross-Site Scripting Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress WP Booking System plugin, which can be exploited by remote...

WP Booking System <= 1.3.3 - Authenticated Stored Cross-Site Scripting (XSS)

The WP Booking System – Booking Calendar WordPress plugin was affected by an Authenticated Stored Cross-Site Scripting XSS security vulnerability...

Hotel Booking Script 1.0 - SQL Injection

Exploit Title: Hotel & Tour Package Script v1.0 - SQL Injection Google Dork: N/A Date: 26.03.2017 Vendor Homepage: http://eagletechnosys.com/ Software: http://www.eaglescripts.com/hotel-booking-script Demo: http://hotelbooking.phpscriptsdemo.com/ Version: 1.0 Tested on: Win7 x64, Kali Linux x64...

Online Hotel Booking System Pro 1.2 SQL Injection

Exploit Title: Online Hotel Booking System Pro v1.2 - SQL Injection Google Dork: N/A Date: 27.01.2017 Vendor Homepage: http://www.bestsoftinc.com/ Software Buy: https://codecanyon.net/item/online-hotel-booking-system-pro/4606514 Demo: http://envato.bestsoftinc.net/hotel-booking-pro/ Version: 1.2...

WordPress Online Hotel Booking System Pro 1.0 SQL Injection

Exploit Title: Online Hotel Booking System Pro v1.0 WordPress Plugin - SQL Injection Google Dork: N/A Date: 27.01.2017 Vendor Homepage: http://www.bestsoftinc.com/ Software Buy: https://codecanyon.net/item/online-hotel-booking-system-pro-wordpress-plugin/9338914 Demo:...

WordPress Plugin Online Hotel Booking System Pro 1.0 - SQL Injection

WordPress Plugin Online Hotel Booking System Pro 1.0 - SQL Injection Exploit Title: Online Hotel Booking System Pro v1.0 WordPress Plugin - SQL Injection Google Dork: N/A Date: 27.01.2017 Vendor Homepage: http://www.bestsoftinc.com/ Software Buy:...

Online Hotel Booking System Pro 1.2 - SQL Injection

Online Hotel Booking System Pro 1.2 - SQL Injection Exploit Title: Online Hotel Booking System Pro v1.2 - SQL Injection Google Dork: N/A Date: 27.01.2017 Vendor Homepage: http://www.bestsoftinc.com/ Software Buy: https://codecanyon.net/item/online-hotel-booking-system-pro/4606514 Demo:...

Online Hotel Booking System Pro 1.2 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Online Hotel Booking System Pro v1.2 - SQL Injection Google Dork: N/A Date: 27.01.2017 Vendor Homepage: http://www.bestsoftinc.com/ Software Buy: https://codecanyon.net/item/online-hotel-booking-system-pro/4606514 Demo:...

WordPress Online Hotel Booking System Pro premium plugin <= 1.0 - SQL Injection (SQLi) vulnerability

SQL Injection SQLi vulnerability discovered by Ihsan Sencan in WordPress Online Hotel Booking System Pro premium plugin versions = 1.0. Solution Update the WordPress Online Hotel Booking System Pro premium plugin to the latest available version at least 1.1...

Online Hotel Booking System Pro Cross-Site Scripting Vulnerability

Online Hotel Booking System Pro is an online hotel booking system. Cross-site scripting vulnerabilities exist in the booking-failure.php page in Online Hotel Booking System Pro version 1.2, where the program fails to adequately filter user-submitted input. An attacker could exploit these...

WordPress插件Pinpoint Booking System SQL注入漏洞

No description provided by source...

Online Airline Booking System - Multiple Vulnerabilities

Exploit Title : Online Airline Booking System multiple vulnerabilities Author : WICS Date : 05/1/2016 Software Link : http://sourceforge.net/projects/oabs/ Affected Version: All Overview: The Online Airline Booking System is designed to be an all in one solution for an airline wishing to speed up...

Online Airline Booking System - Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title : Online Airline Booking System multiple vulnerabilities Author : WICS Date : 05/1/2016 Software Link : http://sourceforge.net/projects/oabs/ Affected Version: All Overview: The Online Airline Booking System is designed to be an...

WordPress Plugin Pinpoint Booking System SQL Injection Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platforms developed using the PHP language, which supports personal blog sites on servers running PHP and MySQL.Pinpoint Booking System is one of the plugins used to create a booking or reservation system in a WordPress site. A SQL...

WordPress Booking System Plugin <= 1.3 - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...

Pinpoint Booking System <= 2.0 - Authenticated Blind SQL Injection

The Pinpoint Booking System – 1 WordPress Booking Plugin WordPress plugin was affected by an Authenticated Blind SQL Injection security vulnerability...

WordPress Booking System Plugin <= 2.0 - Blind SQL Injection

Because of this vulnerability, remote authenticated users can execute arbitrary SQL commands via "language" parameter. Solution Update the plugin...

Booking System Pro CSRF Vulnerability

No description provided by source. Exploit Title: Booking System Pro CSRF Vulnerability Date: 28/08/2012 Author: DaOne @LibyanCA Vendor: http://www.neptunescripts.com/products Price: $39 CSRF Add Admin html body onload=document.form0.submit; form method=POST name=form0...