7818 matches found
legolandholidays.de XSS vulnerability
Vulnerable URL: https://www.legolandholidays.de/booking/package/results.html?==0=2000=%22%27,;%3C/script%3E%3Cscript%3Econfirm%27OPENBUGBOUNTY%27%3C/script%3E=29.08.2017=5=03.09.2017=0=100=%5B%7B%22numberOfAdults%22%3A2%2C%22childAges%22%3A%5B%5D%7D%5D=LLDP2 Details: Description| Value ---|---...
PHP Appointment Booking Script - Authentication Bypass
======================================================== Description : an attacker is able to inject malicious sql query to bypass the login page and login as admin Proof of Concept : - http://localhost/appointment/adminlogin.php set username and password to admin' or 1=1 -- -...
PHP Appointment Booking Script - Authentication Bypass
PHP Appointment Booking Script - Authentication Bypass ======================================================== Description : an attacker is able to inject malicious sql query to bypass the login page and login as admin Proof of Concept : - http://localhost/appointment/adminlogin.php set username...
Meeting and Hotel Booking Provider's Data Found in Public Amazon S3 Bucket
Leaks of personal and business information from unsecured Amazon S3 buckets are piling up. The latest belongs to Groupize, a Boston-area business that sells tools to manage small group meetings as well as a booking engine that handles hotel room-block reservations. Researchers at Kromtech Securit...
hotelolimpia.net XSS vulnerability
Vulnerable URL: http://www.hotelolimpia.net/booking.html?bform%5Bcheckin%5D=%22%3E%3C/iframe%3E%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E%5Bcheckout%5D=18-08-2017%5BnumRooms%5D=1%5BreqRooms%5D%5B1%5D%5Badults%5D=2%5BreqRooms%5D%5B1%5D%5Bchild%5D=0 Details: Description| Value ---|---...
magicalshuttle.co.uk XSS vulnerability
Vulnerable URL: http://magicalshuttle.co.uk/booking Details: Description| Value ---|--- Patched:| Yes, at 27.11.2017 Latest check for patch:| 27.11.2017 21:36 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 820390 VIP website status:| No Check magicalshuttle.co....
suu.edu XSS vulnerability
Vulnerable URL: https://www.suu.edu/mc/experts/book-expert.php?expert=1"...
city-oberland.ch XSS vulnerability
Vulnerable URL: https://www.city-oberland.ch/booking/modules/hotelextended/calendar.php?arrive=1〈=en=2017=06=city-oberland=Y-m-d=arrive=1"...
haltonhonda.com XSS vulnerability
Vulnerable URL: http://www.haltonhonda.com/new/book-a-test-drive/?vehicleid=8293418"' /Style=position:fixed;top:0;left:0;font-size:999px; /Onmouseenter=confirmOPENBUGBOUNTY // Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerabili...
CVE-2017-2168
Cross-site scripting vulnerability in WP Booking System Free version prior to version 1.4 and WP Booking System Premium version prior to version 3.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2017-2168
Cross-site scripting vulnerability in WP Booking System Free version prior to version 1.4 and WP Booking System Premium version prior to version 3.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2017-2168
Cross-site scripting vulnerability in WP Booking System Free version prior to version 1.4 and WP Booking System Premium version prior to version 3.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2017-2168
The CVE-2017-2168 entry maps to the WordPress plugin WP Booking System. A stored cross-site scripting (XSS) vulnerability exists in WP Booking System Free versions prior to 1.4 and Premium versions prior to 3.7, allowing remote attackers to inject arbitrary scripts via unspecified vectors. Impact...
WordPress WP Booking System Plugin Cross-Site Scripting Vulnerability
WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress WP Booking System plugin, which can be exploited by remote...
WP Booking System <= 1.3.3 - Authenticated Stored Cross-Site Scripting (XSS)
The WP Booking System – Booking Calendar WordPress plugin was affected by an Authenticated Stored Cross-Site Scripting XSS security vulnerability...
ticket.se XSS vulnerability
Vulnerable URL:...
CVE-2017-2151
Cross-site scripting vulnerability in Booking Calendar version 7.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2017-2150
Directory traversal vulnerability in Booking Calendar version 7.0 and earlier allows remote attackers to read arbitrary files via specially crafted captchachalange parameter...