CVE-2017-2168

The CVE-2017-2168 entry maps to the WordPress plugin WP Booking System. A stored cross-site scripting (XSS) vulnerability exists in WP Booking System Free versions prior to 1.4 and Premium versions prior to 3.7, allowing remote attackers to inject arbitrary scripts via unspecified vectors. Impact...

CVE-2017-2168: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in WP Booking System Free version prior to version 1.4 and WP Booking System Premium version prior to version 3.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2017-15228

Name of the Vulnerable Software and Affected Versions WP Booking System Free versions prior to 1.4 WP Booking System Premium versions prior to 3.7 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For W...

WordPress WP Booking System Plugin Cross-Site Scripting Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress WP Booking System plugin, which can be exploited by remote...

WP Booking System <= 1.3.3 - Authenticated Stored Cross-Site Scripting (XSS)

The WP Booking System – Booking Calendar WordPress plugin was affected by an Authenticated Stored Cross-Site Scripting XSS security vulnerability...

Hotel Booking Script 1.0 - SQL Injection

Exploit Title: Hotel & Tour Package Script v1.0 - SQL Injection Google Dork: N/A Date: 26.03.2017 Vendor Homepage: http://eagletechnosys.com/ Software: http://www.eaglescripts.com/hotel-booking-script Demo: http://hotelbooking.phpscriptsdemo.com/ Version: 1.0 Tested on: Win7 x64, Kali Linux x64...

WordPress Online Hotel Booking System Pro 1.0 SQL Injection

Exploit Title: Online Hotel Booking System Pro v1.0 WordPress Plugin - SQL Injection Google Dork: N/A Date: 27.01.2017 Vendor Homepage: http://www.bestsoftinc.com/ Software Buy: https://codecanyon.net/item/online-hotel-booking-system-pro-wordpress-plugin/9338914 Demo:...

Online Hotel Booking System Pro 1.2 SQL Injection

Exploit Title: Online Hotel Booking System Pro v1.2 - SQL Injection Google Dork: N/A Date: 27.01.2017 Vendor Homepage: http://www.bestsoftinc.com/ Software Buy: https://codecanyon.net/item/online-hotel-booking-system-pro/4606514 Demo: http://envato.bestsoftinc.net/hotel-booking-pro/ Version: 1.2...

Online Hotel Booking System Pro 1.2 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Online Hotel Booking System Pro v1.2 - SQL Injection Google Dork: N/A Date: 27.01.2017 Vendor Homepage: http://www.bestsoftinc.com/ Software Buy: https://codecanyon.net/item/online-hotel-booking-system-pro/4606514 Demo:...

WordPress Online Hotel Booking System Pro premium plugin <= 1.0 - SQL Injection (SQLi) vulnerability

SQL Injection SQLi vulnerability discovered by Ihsan Sencan in WordPress Online Hotel Booking System Pro premium plugin versions = 1.0. Solution Update the WordPress Online Hotel Booking System Pro premium plugin to the latest available version at least 1.1...

Online Hotel Booking System Pro 1.2 - SQL Injection

Online Hotel Booking System Pro 1.2 - SQL Injection Exploit Title: Online Hotel Booking System Pro v1.2 - SQL Injection Google Dork: N/A Date: 27.01.2017 Vendor Homepage: http://www.bestsoftinc.com/ Software Buy: https://codecanyon.net/item/online-hotel-booking-system-pro/4606514 Demo:...

WordPress Plugin Online Hotel Booking System Pro 1.0 - SQL Injection

WordPress Plugin Online Hotel Booking System Pro 1.0 - SQL Injection Exploit Title: Online Hotel Booking System Pro v1.0 WordPress Plugin - SQL Injection Google Dork: N/A Date: 27.01.2017 Vendor Homepage: http://www.bestsoftinc.com/ Software Buy:...

Online Hotel Booking System Pro Cross-Site Scripting Vulnerability

Online Hotel Booking System Pro is an online hotel booking system. Cross-site scripting vulnerabilities exist in the booking-failure.php page in Online Hotel Booking System Pro version 1.2, where the program fails to adequately filter user-submitted input. An attacker could exploit these...

WordPress插件Pinpoint Booking System SQL注入漏洞

No description provided by source...

Online Airline Booking System - Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title : Online Airline Booking System multiple vulnerabilities Author : WICS Date : 05/1/2016 Software Link : http://sourceforge.net/projects/oabs/ Affected Version: All Overview: The Online Airline Booking System is designed to be an...

Online Airline Booking System - Multiple Vulnerabilities

Exploit Title : Online Airline Booking System multiple vulnerabilities Author : WICS Date : 05/1/2016 Software Link : http://sourceforge.net/projects/oabs/ Affected Version: All Overview: The Online Airline Booking System is designed to be an all in one solution for an airline wishing to speed up...

WordPress Plugin Pinpoint Booking System SQL Injection Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platforms developed using the PHP language, which supports personal blog sites on servers running PHP and MySQL.Pinpoint Booking System is one of the plugins used to create a booking or reservation system in a WordPress site. A SQL...

WordPress Booking System Plugin <= 1.3 - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...

Pinpoint Booking System <= 2.0 - Authenticated Blind SQL Injection

The Pinpoint Booking System – 1 WordPress Booking Plugin WordPress plugin was affected by an Authenticated Blind SQL Injection security vulnerability...

WordPress Booking System Plugin <= 2.0 - Blind SQL Injection

Because of this vulnerability, remote authenticated users can execute arbitrary SQL commands via "language" parameter. Solution Update the plugin...