Lucene search
+L

1975 matches found

Positive Technologies
Positive Technologies
added 2026/03/08 12:0 a.m.13 views

PT-2026-23918

Name of the Vulnerable Software and Affected Versions Simple Flight Ticket Booking System version 1.0 Description A flaw exists in Simple Flight Ticket Booking System 1.0 that allows for SQL injection. A manipulation of the Username argument in the /register.php file can trigger this issue. The...

9.8CVSS6.9AI score0.0035EPSS
Exploits1References14
Positive Technologies
Positive Technologies
added 2026/03/08 12:0 a.m.17 views

PT-2026-23919

A security vulnerability has been detected in code-projects Simple Flight Ticket Booking System 1.0. This impacts an unknown function of the file /Adminadd.php. The manipulation of the argument flightno/airplaneid/departure/dtime/arrival/atime/ec/ep/bc/bp leads to sql injection. Remote exploitati...

5.8CVSS5.7AI score0.00271EPSS
Exploits1References7
CNNVD
CNNVD
added 2026/03/08 12:0 a.m.10 views

Code-Projects Simple Flight Ticket Booking System SQL注入漏洞

Code-Projects Simple Flight Ticket Booking System is a simple airline ticket booking system developed by Code-Projects. Version 1.0 of the Code-Projects Simple Flight Ticket Booking System has a SQL injection vulnerability. This vulnerability arises from incorrect operations with parameters such ...

7.2CVSS5.9AI score0.00271EPSS
Exploits1References7
Positive Technologies
Positive Technologies
added 2026/03/08 12:0 a.m.13 views

PT-2026-23914

Name of the Vulnerable Software and Affected Versions Simple Flight Ticket Booking System version 1.0 Description A flaw exists in Simple Flight Ticket Booking System that allows for remote SQL injection. The issue stems from improper handling of the flightno argument within the /Adminsearch.php...

9.8CVSS7.1AI score0.00357EPSS
Exploits1References14
Nuclei
Nuclei
added 2026/03/06 11:22 p.m.9 views

Course Booking System <= 6.0.6 - SQL Injection

The Course Booking System plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 6.0.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to...

9.3CVSS5.8AI score0.02896EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2026/03/06 7:55 a.m.5 views

CVE-2025-68515

Insertion of Sensitive Information Into Sent Data vulnerability in Roland Murg WP Booking System wp-booking-system allows Retrieve Embedded Sensitive Data.This issue affects WP Booking System: from n/a through = 2.0.19.12...

5.8CVSS5.8AI score0.00316EPSS
Exploits0References1
EUVD
EUVD
added 2026/03/05 6:30 a.m.6 views

EUVD-2025-208300

Insertion of Sensitive Information Into Sent Data vulnerability in Roland Murg WP Booking System wp-booking-system allows Retrieve Embedded Sensitive Data.This issue affects WP Booking System: from n/a through = 2.0.19.12...

5.9AI score0.00316EPSS
Exploits0References2
NVD
NVD
added 2026/03/05 6:16 a.m.5 views

CVE-2025-68515

Insertion of Sensitive Information Into Sent Data vulnerability in Roland Murg WP Booking System wp-booking-system allows Retrieve Embedded Sensitive Data.This issue affects WP Booking System: from n/a through = 2.0.19.12...

5.8CVSS0.00316EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/03/05 5:53 a.m.1 views

CVE-2025-68515 WordPress WP Booking System plugin <= 2.0.19.12 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Roland Murg WP Booking System wp-booking-system allows Retrieve Embedded Sensitive Data.This issue affects WP Booking System: from n/a through = 2.0.19.12...

5.8CVSS5.8AI score0.00316EPSS
Exploits0References1
CVE
CVE
added 2026/03/05 5:53 a.m.13 views

CVE-2025-68515

CVE-2025-68515 affects the WordPress plugin WP Booking System (Roland Murg) up to version 2.0.19.12. The issue is an information disclosure flaw caused by insertion of sensitive data into sent data, enabling retrieval of embedded sensitive data. There is no explicit exploitation status in the pro...

5.8CVSS5.9AI score0.00316EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/03/05 5:53 a.m.29 views

CVE-2025-68515 WordPress WP Booking System plugin <= 2.0.19.12 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Roland Murg WP Booking System wp-booking-system allows Retrieve Embedded Sensitive Data.This issue affects WP Booking System: from n/a through = 2.0.19.12...

5.8CVSS0.00316EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/03/05 12:0 a.m.6 views

WordPress plugin WP Booking System 安全漏洞

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. An information disclosure vulnerability exists in the WordPress plugin WP Booking System, which...

5.8CVSS5.7AI score0.00316EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/03/05 12:0 a.m.7 views

PT-2026-23139

Name of the Vulnerable Software and Affected Versions Roland Murg WP Booking System versions through 2.0.19.12 Description The Roland Murg WP Booking System contains a flaw that allows retrieval of embedded sensitive data due to insertion of sensitive information into sent data. Recommendations...

5.8AI score0.00316EPSS
Exploits0References3
Patchstack
Patchstack
added 2026/03/04 7:11 a.m.7 views

WordPress WP Booking System plugin <= 2.0.19.12 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by benzdeus in WordPress Plugin WP Booking System versions = 2.0.19.12...

5.8CVSS5.9AI score0.00316EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2026/02/03 8:14 a.m.9 views

WordPress Salon booking system plugin < 9.6.3 - Unauthenticated Stored XSS vulnerability

Unauthenticated Stored XSS vulnerability discovered by cyc707 in WordPress Plugin Salon booking system versions 9.6.3...

4.7CVSS5.3AI score0.00464EPSS
Exploits2References1Affected Software1
RedhatCVE
RedhatCVE
added 2026/01/23 9:16 p.m.8 views

CVE-2025-67954

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Retrieve Embedded Sensitive Data.This issue affects Salon booking system: from n/a through = 10.30.3...

6.5CVSS5.4AI score0.00355EPSS
Exploits0References1
NVD
NVD
added 2026/01/22 5:16 p.m.4 views

CVE-2025-67954

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Retrieve Embedded Sensitive Data.This issue affects Salon booking system: from n/a through = 10.30.3...

6.5CVSS0.00355EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/22 4:51 p.m.3 views

CVE-2025-67954

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Retrieve Embedded Sensitive Data.This issue affects Salon booking system: from n/a through = 10.30.3...

6.5CVSS5.4AI score0.00355EPSS
Exploits0References2
CVE
CVE
added 2026/01/22 4:51 p.m.8 views

CVE-2025-67954

CVE-2025-67954 describes an information disclosure flaw in the WordPress plugin “Salon Booking System” (Salon booking system) affecting versions up to and including 10.30.3. The issue is exposed via an unauthorized control sphere, enabling retrieval of embedded sensitive data. Multiple security s...

6.5CVSS5.4AI score0.00355EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/01/22 4:51 p.m.2 views

CVE-2025-67954 WordPress Salon booking system plugin <= 10.30.3 - Sensitive Data Exposure vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Retrieve Embedded Sensitive Data.This issue affects Salon booking system: from n/a through = 10.30.3...

5.9AI score0.00355EPSS
Exploits0References1
Rows per page
Query Builder