Lucene search
+L

2415 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/02 12:00 a.m.•5 views

CVE-2020-29283: Improper Neutralization of Special Elements used in an SQL Command

An SQL injection vulnerability was discovered in Online Doctor Appointment Booking System PHP and Mysql via the q parameter to getuser.php...

9.8CVSS8.2AI score0.01335EPSS
SaveExploits1References2
Check Point Advisories
Check Point Advisories
•added 2020/11/04 12:00 a.m.•32 views

SourceCodester Online Bus Booking System SQL Injection (CVE-2020-25273)

An SQL injection vulnerability exists in SourceCodester Online Bus Booking System. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

7.5CVSS5.2AI score0.01813EPSS
SaveExploits2
OSV
OSV
•added 2020/10/08 1:15 p.m.•17 views

CVE-2020-25272

In SourceCodester Online Bus Booking System 1.0, there is XSS through the name parameter in booknow.php...

6.1CVSS6.4AI score0.00866EPSS
SaveExploits1References2
NVD
NVD
•added 2020/10/08 1:15 p.m.•25 views

CVE-2020-25272

In SourceCodester Online Bus Booking System 1.0, there is XSS through the name parameter in booknow.php...

6.1CVSS0.00866EPSS
SaveExploits1References2
Prion
Prion
•added 2020/10/08 1:15 p.m.•28 views

Design/Logic Flaw

In SourceCodester Online Bus Booking System 1.0, there is XSS through the name parameter in booknow.php...

4.3CVSS6AI score0.00866EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2020/10/08 12:34 p.m.•36 views

CVE-2020-25273

In SourceCodester Online Bus Booking System 1.0, there is Authentication bypass on the Admin Login screen in admin.php via username or password SQL injection...

10AI score0.01813EPSS
SaveExploits2References2
CVE
CVE
•added 2020/10/08 12:34 p.m.•65 views

CVE-2020-25273

The CVE-2020-25273 entry concerns SourceCodester Online Bus Booking System 1.0 with an authentication bypass on the Admin Login. The connected exploit repository provides concrete details: the vulnerability resides in the login flow (admin.php/login_auth.php) and is triggered via SQL injection in...

9.8CVSS10AI score0.01813EPSS
SaveExploits2References2Affected Software1
CVE
CVE
•added 2020/10/08 12:30 p.m.•53 views

CVE-2020-25272

CVE-2020-25272 corresponds to an XSS vulnerability in SourceCodester Online Bus Booking System 1.0, triggered via the name parameter in book_now.php. The available connected documents confirm the affected product and the vulnerability vector, but do not provide details on the exploitation status,...

6.1CVSS5.9AI score0.00866EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2020/10/08 12:30 p.m.•42 views

CVE-2020-25272

In SourceCodester Online Bus Booking System 1.0, there is XSS through the name parameter in booknow.php...

6AI score0.00866EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/10/08 12:00 a.m.•5 views

CVE-2020-25273: Improper Neutralization of Special Elements used in an SQL Command

In SourceCodester Online Bus Booking System 1.0, there is Authentication bypass on the Admin Login screen in admin.php via username or password SQL injection...

9.8CVSS5.8AI score0.01813EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/10/08 12:00 a.m.•5 views

CVE-2020-25272: Improper Neutralization of Input During Web Page Generation

In SourceCodester Online Bus Booking System 1.0, there is XSS through the name parameter in booknow.php...

6.1CVSS5.8AI score0.00866EPSS
SaveExploits1References2
GithubExploit
GithubExploit
•added 2020/09/23 4:29 a.m.•60 views

Exploit for SQL Injection in Online_Bus_Booking_System_Project Online_Bus_Booking_System

CVE-2020-25273 Online Bus Booking System 1.0, there is Authen...

9.8CVSS10AI score0.01813EPSS
SaveExploits2
Openbugbounty
Openbugbounty
•added 2020/09/01 10:44 a.m.•12 views

booking.myguestcare.com Cross Site Scripting vulnerability OBB-1292521

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
SaveExploits0
CNVD
CNVD
•added 2020/08/28 12:00 a.m.•16 views

Online Hotel Booking System Pro Cross-Site Scripting Vulnerability (CNVD-2020-52192)

Online Hotel Booking System Pro is a hotel booking system. A cross-site scripting vulnerability exists in the customer registration form in Online Hotel Booking System Pro 1.3, which can be exploited by an attacker to execute client-side code...

5.4CVSS6.4AI score0.00602EPSS
SaveExploits1References1
NVD
NVD
•added 2020/08/27 3:15 p.m.•27 views

CVE-2020-23984

Online Hotel Booking System Pro PHP Version 1.3 has Persistent Cross-site Scripting in Customer registration-form all-tags...

5.4CVSS5.5AI score0.00602EPSS
SaveExploits1References1
CVE
CVE
•added 2020/08/27 2:31 p.m.•60 views

CVE-2020-23984

CVE-2020-23984 affects Online Hotel Booking System Pro PHP Version 1.3, with a persistent cross-site scripting flaw in the Customer registration-form all-tags. The Red Hat/CNVD/NVD entries corroborate a client-side script execution vulnerability in the registration form. No explicit remediation o...

5.4CVSS5.5AI score0.00602EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2020/08/27 2:31 p.m.•35 views

CVE-2020-23984

Online Hotel Booking System Pro PHP Version 1.3 has Persistent Cross-site Scripting in Customer registration-form all-tags...

5.5AI score0.00602EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/08/27 12:00 a.m.•4 views

CVE-2020-23984: Improper Neutralization of Input During Web Page Generation

Online Hotel Booking System Pro PHP Version 1.3 has Persistent Cross-site Scripting in Customer registration-form all-tags...

5.4CVSS5.7AI score0.00602EPSS
SaveExploits1References2
zdt
zdt
•added 2020/07/15 12:00 a.m.•216 views

Web Based Online Hotel Booking System 0.1.0 - Authentication Bypass Vulnerability

Exploit for php platform in category web applications Exploit Title: Web Based Online Hotel Booking System 0.1.0 - Authentication Bypass Exploit Author: KeopssGroup0day,Inc Vendor Homepage: https://github.com/mrzulkarnine/Web-based-hotel-booking-system Software Link:...

0.1AI score
SaveExploits0
CNVD
CNVD
•added 2020/07/06 12:00 a.m.•11 views

WordPress bestsoftinc Hotel Booking System Pro Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. bestsoftinc Hotel Booking System Pro is a hotel booking system plugin used in it. A cross-site scripting vulnerability exists in...

6.1CVSS6.2AI score0.01167EPSS
SaveExploits2References1
Rows per page
Query Builder