zumatours.net XSS vulnerability

Vulnerable URL: http://www.zumatours.net/wp-content/plugins/rezgo-online-booking-new/framerouter.php?mode=pagedetails=%3C/title%3E%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 08:32 GMT...

Booking Revolution (Wrestling) - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Booking Revolution Wrestling published at the 'play' market has multiple vulnerabilities...

IHG® Hotel Booking & Deals - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application IHG® Hotel Booking & Deals published at the 'play' market has multiple vulnerabilities...

AccorHotels hotel booking - Customized SSL, Dangerous filesystem permissions, LGPL license vulnerabilities

HackApp vulnerability scanner discovered that application AccorHotels hotel booking published at the 'play' market has multiple vulnerabilities...

TALIXO - Taxi & Limo Booking - Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application TALIXO - Taxi & Limo Booking published at the 'play' market has multiple vulnerabilities...

WordPress Booking Calendar Contact Form 1.0.23 盲注

No description provided by source...

WordPress Dharma Booking 2.28.3 Remote / Local File Inclusion

Exploit Title: Wordpress Dharma booking File Inclusion Date: 03/22/2016 Exploit Author: AMAR^SHG Vendor Homepage:https://wordpress.org/plugins/dharma-booking/ Software Link : https://wordpress.org/plugins/dharma-booking/ Version: =2.28.3 Tested on: WINDOWS/WAMP...

WordPress Plugin Dharma Booking 2.38.3 - Remote File Inclusion

Exploit Title: Wordpress Dharma booking File Inclusion Date: 03/22/2016 Exploit Author: AMAR^SHG Vendor Homepage:https://wordpress.org/plugins/dharma-booking/ Software Link : https://wordpress.org/plugins/dharma-booking/ Version: =2.28.3 Tested on: WINDOWS/WAMP...

WordPress Plugin Dharma Booking 2.38.3 - Remote File Inclusion

WordPress Plugin Dharma Booking 2.38.3 - Remote File Inclusion Exploit Title: Wordpress Dharma booking File Inclusion Date: 03/22/2016 Exploit Author: AMAR^SHG Vendor Homepage:https://wordpress.org/plugins/dharma-booking/ Software Link : https://wordpress.org/plugins/dharma-booking/ Version:...

WordPress Dharma Booking Plugin 2.38.3 - File Inclusion

WordPress Dharma Booking plugin is prone to a file inclusion vulnerability. Solution Upgrade the plugin...

WordPress Dharma booking 2.38.3 Plugin - File Inclusion

Exploit for php platform in category web applications Exploit Title: Wordpress Dharma booking File Inclusion Date: 03/22/2016 Exploit Author: AMAR^SHG Vendor Homepage:https://wordpress.org/plugins/dharma-booking/ Software Link : https://wordpress.org/plugins/dharma-booking/ Version: =2.28.3 Teste...

Zomato: Persistent XSS on Reservation / Booking Page

Hi, Its a persistent xss issue on booking or reservation page. I am going to add the video which is demonstrate the bug. Have a nice work! Here is video: https://www.youtube.com/watch?v=NBDBnKorF6o...

WordPress预订日历联系表单1.1.24 多个漏洞 (XSS, CSRF)

No description provided by source...

Wordpress Booking Calendar Contact Form Plugin <=1.1.23 - Shortcode SQL注入漏洞

No description provided by source...

WordPress Booking Calendar Contact Form<=1.1.24 - cpabc_appointments.php文件addslashes SQL Injection V

No description provided by source...

WordPress appointment-booking-calendar <=1.1.23 - Unauthenticated SQL injection

No description provided by source...

WordPress Booking Calendar Contact Form Plugin 1.0.23 - Multiple Vulnerabilities

This plugin is prone to multiple vulnerabilities, such as unauthenticated blind SQL injection, privilege escalation and stored XSS vulnerabilities. Solution Upgrade the plugin...

WordPress Booking Calendar Contact Form 1.0.23 Shortcode SQL Injection

Exploit Title: Wordpress booking calendar contact form =v1.0.23 - Unauthenticated blind SQL injection Date: 2016-02-08 Google Dork: Index of /wp-content/plugins/booking-calendar-contact-form Exploit Author: Joaquin Ramirez Martinez i0 SEC-LABORATORY Vendor Homepage: http://wordpress.dwbooster.com...

WordPress Booking Calendar Contact Form 1.0.23 Blind SQL Injection

Exploit Title: Wordpress booking calendar contact form =v1.0.23 - Unauthenticated blind SQL injection Date: 2016-02-08 Google Dork: Index of /wp-content/plugins/booking-calendar-contact-form Exploit Author: Joaquin Ramirez Martinez i0 SEC-LABORATORY Vendor Homepage: http://wordpress.dwbooster.com...

WordPress Booking Calendar Contact Form 1.0.23 CSRF / XSS

Exploit Title: Wordpress booking calendar contact form =v1.0.23 - Privilege escalation / stored XSS vulnerabilities Date: 2016-02-08 Google Dork: Index of /wp-content/plugins/booking-calendar-contact-form Exploit Author: Joaquin Ramirez Martinez i0 SEC-LABORATORY Vendor Homepage:...