Lucene search
+L

7896 matches found

CNVD
CNVD
added 2016/08/04 12:00 a.m.4 views

WordPress Plugin Booking Calendar SQL Injection Vulnerability

WordPress is a blogging platform developed using the PHP language that allows users to set up their own weblogs on servers that support PHP and MySQL databases.Booking Calendar is a WEB-based calendar application. A SQL injection vulnerability exists in the WordPress plugin Booking Calendar. An...

7.7AI score
SaveExploits0References1
Packet Storm
Packet Storm
added 2016/08/01 12:00 a.m.28 views

WordPress Booking Calendar 6.2.1 Cross Site Scripting

------------------------------------------------------------------------ Cross-Site Scripting vulnerability in Booking Calendar WordPress Plugin ------------------------------------------------------------------------ Edwin Molenaar, July 2016...

7.4AI score
SaveExploits0
Patchstack
Patchstack
added 2016/08/01 12:00 a.m.8 views

WordPress Booking Calendar plugin <= 6.2 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by ethicalhack3r in WordPress Booking Calendar plugin versions = 6.2. Solution Update the WordPress Booking Calendar plugin to the latest available version at least 6.2.1...

2AI score
SaveExploits0References2Affected Software1
zdt
zdt
added 2016/08/01 12:00 a.m.45 views

WordPress Booking Calendar 6.2 Plugin - SQL Injection

Exploit for php platform in category web applications SQL injection vulnerability in Booking Calendar WordPress Plugin Abstract An SQL injection vulnerability exists in the Booking Calendar WordPress plugin. This vulnerability allows an attacker to view data from the database. The affected...

7.1AI score
SaveExploits0
WPVulnDB
WPVulnDB
added 2016/08/01 12:00 a.m.11 views

Booking Calendar <= 6.2 - Reflected Cross-Site Scripting (XSS)

The Booking Calendar WordPress plugin was affected by a Reflected Cross-Site Scripting XSS security vulnerability...

1.4AI score
SaveExploits0References2Affected Software1
Packet Storm
Packet Storm
added 2016/08/01 12:00 a.m.37 views

WordPress Booking Calendar 6.2 SQL Injection

------------------------------------------------------------------------ SQL injection vulnerability in Booking Calendar WordPress Plugin ------------------------------------------------------------------------ Edwin Molenaar, July 2016...

7.4AI score
SaveExploits0
Patchstack
Patchstack
added 2016/08/01 12:00 a.m.12 views

WordPress Booking Calendar plugin <= 6.2 - SQL Injection (SQLi) vulnerability

SQL Injection SQLi vulnerability discovered by ethicalhack3r in WordPress Booking Calendar plugin versions = 6.2. Solution Update the WordPress Booking Calendar plugin to the latest available version at least 6.2.1...

2.7AI score
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2016/08/01 12:00 a.m.12 views

WordPress Booking Calendar Plugin <= 6.2 - Reflected Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...

2.1AI score
SaveExploits0References1Affected Software1
WPVulnDB
WPVulnDB
added 2016/08/01 12:00 a.m.4 views

Booking Calendar <= 6.2 - SQL Injection

The Booking Calendar WordPress plugin was affected by a SQL Injection security vulnerability...

2.4AI score
SaveExploits0References3Affected Software1
Patchstack
Patchstack
added 2016/08/01 12:00 a.m.11 views

WordPress Booking Calendar Plugin <= 6.2 - Reflected Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...

2.1AI score
SaveExploits0References1Affected Software1
Exploit DB
Exploit DB
added 2016/08/01 12:00 a.m.45 views

WordPress Plugin Booking Calendar 6.2 - SQL Injection

SQL injection vulnerability in Booking Calendar WordPress Plugin Abstract An SQL injection vulnerability exists in the Booking Calendar WordPress plugin. This vulnerability allows an attacker to view data from the database. The affected parameter is not properly sanitized or protected with an...

5.3AI score
SaveExploits0
hackapp
hackapp
added 2016/07/15 3:36 p.m.18 views

Booking Now - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Booking Now published at the 'play' market has multiple vulnerabilities...

0.6AI score
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2016/07/14 12:00 a.m.9 views

WordPress Booking Calendar Plugin 6.2 - SQL Injection

Booking Calendar Plugin before 6.2 is prone to a SQL Injection vulnerability. The parameters are not sanitized properly in the wpdevgetargsfromrequestinbklisting function from booking/lib/wpdev-bk-lib.php line 709. It allows remote attackers to view data from the database by luring the target use...

4.8AI score
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2016/07/14 12:00 a.m.10 views

WordPress Booking Calendar Plugin 6.2 - SQL Injection

Booking Calendar Plugin before 6.2 is prone to a SQL Injection vulnerability. The parameters are not sanitized properly in the wpdevgetargsfromrequestinbklisting function from booking/lib/wpdev-bk-lib.php line 709. It allows remote attackers to view data from the database by luring the target use...

4.8AI score
SaveExploits0References2Affected Software1
Packet Storm
Packet Storm
added 2016/07/12 12:00 a.m.40 views

Beauty Parlour And SPA Saloon Management System SQL Injection

Vulnerability Title : Beauty Parlour & SPA Saloon Management System Unauthenticated Blind SQL Injection booking.php age Vulnerability Date : 11/07/2016 Exploit Author : Yakir Wizman Vendor Homepage : http://rexbd.net/software/beauty-parlour-and-spa-saloon-management-system Version : All Versions...

0.7AI score
SaveExploits0
Check Point Advisories
Check Point Advisories
added 2016/05/30 12:00 a.m.8 views

WordPress Booking Calendar Contact Form Plugin SQL injection

An SQL injection exists in the WordPress Booking Calendar Contact Form Plugin. It allows an authenticated remote attacker to inject or manipulate SQL queries in the back-end database, allowing for the manipulation or disclosure of arbitrary data...

4AI score
SaveExploits0
seebug.org
seebug.org
added 2016/05/10 12:00 a.m.23 views

WordPress Dharma booking Plugin 2.38.3 本地文件包含漏洞

No description provided by source...

7.1AI score
SaveExploits0
CNVD
CNVD
added 2016/04/20 12:00 a.m.8 views

WordPress Booking Calendar Contact Form plugin SQL injection vulnerability (CNVD-2016-02465)

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. Booking System Booking Calendar versions prior to 1.1.23 fail to effectively filter the value of ´cpabcipncheck´, which could...

6.6AI score
SaveExploits0References1
CNVD
CNVD
added 2016/04/20 12:00 a.m.5 views

WordPress Booking Calendar Contact Form Plugin SQL Injection Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. WordPress Booking Calendar Contact Form plugin suffers from a SQL injection vulnerability by adding specially crafted shortco...

8AI score
SaveExploits0References1
CNVD
CNVD
added 2016/04/18 12:00 a.m.6 views

Multiple Vulnerabilities in WordPress Booking Calendar Contact Form Plugin

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. WordPress Booking Calendar Contact Form plugin version prior to 1.0.23 suffers from a SQL injection, cross-site scripting...

7.2AI score
SaveExploits0References1
Rows per page
Query Builder