79 matches found
CVE-2023-49989
CVE-2023-49989 Hotel Booking Management v1.0 - SQL Injection Vulnerability in the "id" parameter at update.php Description : Hotel Booking Management v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at update.php. Vulnerable Product Version : Hotel Booking...
CVE-2023-49988
CVE-2023-49988 Hotel Booking Management v1.0 - SQL Injection Vulnerability in the "npss" parameter at rooms.php Description : A SQL Injection vulnerability exists in version 1 of the Hotel Booking Management. A malicious attacker can issue SQL commands to the MySQL database when editing the price...
CVE-2026-87840 Tripzzy < 1.5.1 - Unauthenticated Booking Data Tampering
The Tripzzy WordPress plugin before 1.5.1 does not perform any capability or ownership checks on its administrative booking-management actions, which are additionally exposed to unauthenticated users and gated only by a token the Tripzzy WordPress plugin before 1.5.1 issues to any anonymous visit...
CVE-2026-87840
CVE-2026-87840 affects the Tripzzy – Travel Engine System WordPress plugin in versions prior to 1.5.1 . The plugin's administrative booking-management actions perform no capability or ownership checks and are exposed to unauthenticated users, protected only by a token the plugin itself issues to ...
CVE-2026-15153
The WP Hotel Booking WordPress plugin before 2.3.2 does not sanitise and escape a search parameter on an administrative listing before using it in a SQL query, allowing users holding the WP Hotel Booking WordPress plugin before 2.3.2's booking-management roles to perform SQL injection attacks...
EUVD-2026-50990
The WP Hotel Booking WordPress plugin before 2.3.2 does not sanitise and escape a search parameter on an administrative listing before using it in a SQL query, allowing users holding the WP Hotel Booking WordPress plugin before 2.3.2's booking-management roles to perform SQL injection attacks...
CVE-2026-15153
The WP Hotel Booking WordPress plugin before 2.3.2 does not sanitise and escape a search parameter on an administrative listing before using it in a SQL query, allowing users holding the WP Hotel Booking WordPress plugin before 2.3.2's booking-management roles to perform SQL injection attacks...
PT-2026-66393
The WP Hotel Booking WordPress plugin before 2.3.2 does not sanitise and escape a search parameter on an administrative listing before using it in a SQL query, allowing users holding the WP Hotel Booking WordPress plugin before 2.3.2's booking-management roles to perform SQL injection attacks...
EUVD-2026-23434
A vulnerability was detected in arnobt78 Hotel Booking Management System up to f8922d0e0f6ac1cc761974c7616f44c2bbc04bea. The impacted element is an unknown function of the file /api/health/detailed of the component Health Check Endpoint. Performing a manipulation results in information disclosure...
CVE-2023-49988
Hotel Booking Management v1.0 was discovered to contain a SQL injection vulnerability via the npss parameter at rooms.php...
CVE-2023-49989
Hotel Booking Management v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at update.php...
EUVD-2021-31801
Malicious code in bioql PyPI...
EUVD-2021-29203
Malicious code in bioql PyPI...
EUVD-2025-13286
Malicious code in bioql PyPI...
EUVD-2024-33178
Malicious code in bioql PyPI...
EUVD-2025-12073
Malicious code in bioql PyPI...
PT-2025-33262 · Unknown · Campcodes Online Flight Booking Management System
Name of the Vulnerable Software and Affected Versions: Campcodes Online Flight Booking Management System version 1.0 Description: A vulnerability exists in Campcodes Online Flight Booking Management System 1.0, specifically within an unknown functionality of the /admin/save airlines.php file...
CVE-2025-50699
PHPGurukul Online DJ Booking Management System 2.0 is vulnerable to Cross Site Scripting XSS in odms/admin/view-user-queries.php...
CVE-2025-50695
PHPGurukul Online DJ Booking Management System 2.0 is vulnerable to Cross Site Scripting XSS in /admin/view-booking-detail.php and /admin/invoice-generating.php...
CVE-2025-50699
PHPGurukul Online DJ Booking Management System 2.0 contains a Cross-Site Scripting (XSS) flaw in odms/admin/view-user-queries.php. CVSS v3.1 base score 6.1 (MEDIUM) with NETWORK attack vector, no privileges required, user interaction required, and changed scope; impact: Confidentiality Low, Integ...