7852 matches found
CVE-2019-12239
The WP Booking System plugin 1.5.1 for WordPress has no CSRF protection, which allows attackers to reach certain SQL injection issues that require administrative access...
CVE-2019-12239
The CVE-2019-12239 entry concerns the WordPress WP Booking System plugin (version 1.5.1) with a lack of CSRF protection, which allows reaching SQL injection issues that require administrative access. Connected documents confirm this vulnerability and its remediation guidance, e.g., Patchstack and...
PT-2019-12710 · WordPress · Wp Booking System
Name of the Vulnerable Software and Affected Versions: WP Booking System plugin version 1.5.1 Description: The issue is related to the lack of CSRF protection, which can allow attackers to exploit certain SQL injection issues that require administrative access. Recommendations: For WP Booking...
WordPress Travel Booking theme <= 2.7.8.3 - Reflected & Stored Cross-Site Scripting (XSS) vulnerabilities
Reflected & Stored Cross-Site Scripting XSS vulnerabilities found by QUIXSS in WordPress Travel Booking theme versions = 2.7.8.3. Solution Update the WordPress Travel Booking theme to the latest available version at least 2.7.8.4...
Dynamic Web App has a logic flaw vulnerability
Movie.com APP is a mobile sports venue booking software. A logic flaw vulnerability exists in Movie.com APP, which can be exploited by an attacker to log in to any account to withdraw cash...
WordPress Booking Calendar Plugin < 8.4.5 SQL Injection Vulnerability
The WordPress plugin Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the...
uHotelBooking System - system_page SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: uHotelBooking System - 'systempage' SQL Injection Exploit Author: Ahmet Ümit BAYRAM Vendor Homepage: https://www.hotel-booking-script.com Demo Site: https://www.hotel-booking-script.com/demo/ Version: Lastest Tested on: Kali Lin...
CVE-2018-20556
SQL injection vulnerability in Booking Calendar plugin 8.4.3 for WordPress allows remote attackers to execute arbitrary SQL commands via the bookingid parameter...
CVE-2018-20556
SQL injection vulnerability in Booking Calendar plugin 8.4.3 for WordPress allows remote attackers to execute arbitrary SQL commands via the bookingid parameter...
Sql injection
SQL injection vulnerability in Booking Calendar plugin 8.4.3 for WordPress allows remote attackers to execute arbitrary SQL commands via the bookingid parameter...
uHotelBooking System - system_page SQL Injection
uHotelBooking System - systempage SQL Injection Exploit Title: uHotelBooking System - 'systempage' SQL Injection Date: 21.03.2019 Exploit Author: Ahmet Ümit BAYRAM Vendor Homepage: https://www.hotel-booking-script.com Demo Site: https://www.hotel-booking-script.com/demo/ Version: Lastest Tested o...
uHotelBooking System - 'system_page' SQL Injection
Exploit Title: uHotelBooking System - 'systempage' SQL Injection Date: 21.03.2019 Exploit Author: Ahmet Ümit BAYRAM Vendor Homepage: https://www.hotel-booking-script.com Demo Site: https://www.hotel-booking-script.com/demo/ Version: Lastest Tested on: Kali Linux CVE: N/A Description: uHotelBookin...
CVE-2018-20556
SQL injection vulnerability in Booking Calendar plugin 8.4.3 for WordPress allows remote attackers to execute arbitrary SQL commands via the bookingid parameter...
CVE-2018-20556
CVE-2018-20556 is a SQL injection vulnerability in the WordPress plugin Booking Calendar (version 8.4.3). The flaw allows an attacker to manipulate the booking_id parameter to execute arbitrary SQL commands on the underlying database, potentially exposing data. Multiple connected sources corrobor...
PHP Scripts Mall PHP Appointment Booking Script Cross-Site Scripting Vulnerability
PHP Scripts Mall PHP Appointment Booking Script is a web based online appointment booking system by PHP Scripts Mall India. A cross-site scripting vulnerability exists in the user profile page in PHP Scripts Mall PHP Appointment Booking Script version 3.0.3, which can be exploited by attackers to...
PHP Scripts Mall Cab Booking Script Path Traversal Vulnerability
PHP Scripts Mall Cab Booking Script is a cab booking website system by PHP Scripts Mall India. A path traversal vulnerability exists in PHP Scripts Mall Cab Booking Script version 1.0.3, which can be exploited by an attacker to obtain a list of parent directories for jpg or png files...
Directory traversal
PHP Scripts Mall Cab Booking Script 1.0.3 allows Directory Traversal into the parent directory of a jpg or png file...
CVE-2019-9064
PHP Scripts Mall Cab Booking Script 1.0.3 allows Directory Traversal into the parent directory of a jpg or png file...