CVE-2020-25889

CVE-2020-25889 affects the Online Bus Booking System Project Using PHP/MySQL v1.0. The login page is vulnerable to SQL injection due to improper input handling, allowing an attacker to bypass authentication and potentially gain admin privileges. Multiple sources (NVD, Red Hat advisory, PRION, CVE...

WP Hotel Booking <= 1.10.3 - Unauthenticated PHP Object Injection

The plugin unserialised the value in the thimpresshotelbooking1 cookie without sanitisation, which could lead to an unauthenticated PHP Object Injection. If the plugin is installed on WP 5.5.2, then there is a suitable gadget chain to obtain RCE, otherwise, another gadget chain will have to be us...

SourceCodester Online Bus Booking System SQL Injection Vulnerability

SourceCodester Online Bus Booking System is an online bus booking system by an individual developer. The system helps bus companies manage the booking and ticketing process. A SQL injection vulnerability exists in Online Bus Booking System Project Using PHP/MySQL version 1.0, which can be exploit...

Proxymedia Car Rental Management System SQL Injection Vulnerability

Car Rental Management System is a PHP/MySQLi based car rental management system. SQL injection vulnerability exists in Car Rental Management System 1.0. An attacker can exploit this vulnerability to conduct SQL injection attacks via the id parameter in viewcar.php or the carid parameter in...

Online Doctor Appointment Booking System SQL Injection Vulnerability

Online Doctor Appointment Booking System is a web-based online appointment booking system from PHP Scripts Mall Php Scripts Mall, India. Online Doctor Appointment Booking System suffers from a SQL injection vulnerability that originates from a SQL injection vulnerability in the getuser.php...

Sql injection

An SQL injection vulnerability was discovered in Online Doctor Appointment Booking System PHP and Mysql via the q parameter to getuser.php...

Sourcecodester SourceCodester Car Rental Management System SQL注入漏洞

Car Rental Management System is a PHP/MySQLi based car rental management system. SQL injection vulnerability exists in Car Rental Management System 1.0. An attacker can exploit this vulnerability to conduct SQL injection attacks via the id parameter in viewcar.php or the carid parameter in...

CVE-2020-27481

An unauthenticated SQL Injection vulnerability in Good Layers LMS Plugin = 2.1.4 exists due to the usage of "wpajaxnopriv" call in WordPress, which allows any unauthenticated user to get access to the function "gdlrlmscancelbooking" where POST Parameter "id" was sent straight into SQL query witho...

booking-celliers.axianet.ch Cross Site Scripting vulnerability OBB-1495488

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Hotel reservation platform leaked user data from top online booking sites

By Waqas The list of online booking sites affected by the breach includes some of the top industry giants including Booking.com. This is a post from HackRead.com Read the original post: Hotel reservation platform leaked user data from top online booking sites...

SourceCodester Online Bus Booking System SQL Injection (CVE-2020-25273)

An SQL injection vulnerability exists in SourceCodester Online Bus Booking System. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

netbooking.campingitalia.it Cross Site Scripting vulnerability OBB-1459419

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

WordPress Advanced Booking Calendar plugin <= 1.6.1 - Unauthenticated SQL Injection (SQLi) vulnerability

Unauthenticated SQL Injection SQLi vulnerability found by Lenon Leite in WordPress Advanced Booking Calendar plugin versions = 1.6.1. Solution Update the WordPress Advanced Booking Calendar plugin to the latest available version at least 1.6.2...

VulnCheck KEV: CVE-2020-27481

An unauthenticated SQL Injection vulnerability in Good Layers LMS Plugin = 2.1.4 exists due to the usage of "wpajaxnopriv" call in WordPress, which allows any unauthenticated user to get access to the function "gdlrlmscancelbooking" where POST Parameter "id" was sent straight into SQL query witho...

CVE-2020-25273

In SourceCodester Online Bus Booking System 1.0, there is Authentication bypass on the Admin Login screen in admin.php via username or password SQL injection...

CVE-2020-25272

In SourceCodester Online Bus Booking System 1.0, there is XSS through the name parameter in booknow.php...

CVE-2020-25272

In SourceCodester Online Bus Booking System 1.0, there is XSS through the name parameter in booknow.php...

Sql injection

In SourceCodester Online Bus Booking System 1.0, there is Authentication bypass on the Admin Login screen in admin.php via username or password SQL injection...

Design/Logic Flaw

In SourceCodester Online Bus Booking System 1.0, there is XSS through the name parameter in booknow.php...

CVE-2020-25273

In SourceCodester Online Bus Booking System 1.0, there is Authentication bypass on the Admin Login screen in admin.php via username or password SQL injection...