7818 matches found
Laundry Booking Script 1.0 - list?city SQL Injection
Laundry Booking Script 1.0 - list?city SQL Injection Exploit Title: Laundry Booking Script 1.0 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/laundry-booking-script/ Version: 1.0 Category: Webapps...
[SECURITY] Fedora 27 Update: mrbs-1.7.0-1.fc27
The Meeting Room Booking System MRBS is a PHP-based application for booking meeting rooms...
Beauty Parlour Booking Script 1.0 - gender / city SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Beauty Parlour Booking Script 1.0 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/beauty-booking-script/ Demo:...
Beauty Parlour Booking Script 1.0 - 'gender' / 'city' SQL Injection
Exploit Title: Beauty Parlour Booking Script 1.0 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/beauty-booking-script/ Demo: http://fxwebsolution.com/demo/beautyparlour-search/ Version: 1.0 Category...
WordPress WP Simple Booking Calendar Premium plugin <= 6.0-6.1 - Unauthenticated Data leak
When you know the URL which the plugin uses to export iCal feed, then you can see the availability and booking notes via that feed. Solution Update the plugin to 6.2...
WordPress WP Simple Booking Calendar Premium <= 5.8–5.16 - Unauthenticated Data leak
When the tooltip function is disabled, the booking notes are still posted to the source code. Solution Update the plugin to 5.17...
WordPress WP Simple Booking Calendar Premium plugin 5.0–5.4 <= Unauthenticated Data leak
The booking notes are shown in the source code of the page. Solution Update the plugin to 5.5 version...
Wordpress Car Park Booking Plugin - SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Wordpress Plugin Car Park Booking - SQL Injection Exploit Author: 8bitsec Vendor Homepage: https://codecanyon.net/item/car-park-booking-wordpress-plugin/20284035 Software Link:...
WordPress Car Park Booking SQL Injection
Exploit Title: Wordpress Plugin Car Park Booking - SQL Injection Date: 2017-10-17 Exploit Author: 8bitsec Vendor Homepage: https://codecanyon.net/item/car-park-booking-wordpress-plugin/20284035 Software Link: https://codecanyon.net/item/car-park-booking-wordpress-plugin/20284035 Version: 13 Octob...
WordPress Plugin Car Park Booking - SQL Injection
Exploit Title: Wordpress Plugin Car Park Booking - SQL Injection Date: 2017-10-17 Exploit Author: 8bitsec Vendor Homepage: https://codecanyon.net/item/car-park-booking-wordpress-plugin/20284035 Software Link: https://codecanyon.net/item/car-park-booking-wordpress-plugin/20284035 Version: 13 Octob...
WordPress Plugin Car Park Booking - SQL Injection
WordPress Plugin Car Park Booking - SQL Injection Exploit Title: Wordpress Plugin Car Park Booking - SQL Injection Date: 2017-10-17 Exploit Author: 8bitsec Vendor Homepage: https://codecanyon.net/item/car-park-booking-wordpress-plugin/20284035 Software Link:...
tickets.airbaltic.com XSS vulnerability
Vulnerable URL: https://tickets.airbaltic.com/ru/book/avail Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 14.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No...
yanair.ua XSS vulnerability
Vulnerable URL: http://www.yanair.ua/booking.htmlBookingSecondPagePlace:false&2017-10-11&2017-10-%3Csvg%20onload=alert/XSSPOSED/%3E&3&&1=1,2=0,3=0& Details: Description| Value ---|--- Patched:| No Latest check for patch:| 09.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclos...
city-oberland.ch XSS vulnerability
Vulnerable URL: https://www.city-oberland.ch/booking/modules/hotelextended/calendar.php?arrive=1〈=en=22%3E%3Cimg%20src=x%20onerror=alert/OPENBUGBOUNTY/%3E30=07=city-oberland=Y-m-d=arrive= Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicl...
Professional Service Booking Software 1.0 SQL Injection
Exploit Title: Professional Service Booking Software 1.0 - SQL Injection Dork: N/A Date: 09.09.2017 Vendor Homepage: http://scriptzee.com/ Software Link: http://scriptzee.com/best-softwares/professional-service-booking-engine Demo: http://professionalservice.scriptzee.com/ Version: 1.0 Category:...
Professional Service Booking 1.0 - SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Professional Service Booking Software 1.0 - SQL Injection Dork: N/A Date: 09.09.2017 Vendor Homepage: http://scriptzee.com/ Software Link: http://scriptzee.com/best-softwares/professional-service-booking-engine Demo:...
Professional Service Booking 1.0 - SQL Injection
Professional Service Booking 1.0 - SQL Injection Exploit Title: Professional Service Booking Software 1.0 - SQL Injection Dork: N/A Date: 09.09.2017 Vendor Homepage: http://scriptzee.com/ Software Link: http://scriptzee.com/best-softwares/professional-service-booking-engine Demo:...
Zomato: IDOR to cancel any table booking and leak sensitive information such as email,mobile number,uuid
Hacker is able to cancel the other user's table booking, The same request leaked the private information of the user email & mobile no...
PHP Appointment Booking Script - Authentication Bypass Vulnerability
Exploit for php platform in category web applications ======================================================== Description : an attacker is able to inject malicious sql query to bypass the login page and login as admin Proof of Concept : - http://localhost/appointment/adminlogin.php set username...