9127 matches found
The vulnerability of the ptp_unpack_OPL function in the libmtp library, which allows a hacker to trigger a service failure or execute arbitrary code.
The vulnerability of the ptpunpackOPL function in the libmtp library exists due to a mistake related to integer overflow. Exploiting this vulnerability could allow a malicious actor to cause service failures or execute arbitrary code when a mobile device is connected via a USB cable...
Bus Booking Script SQL Injection Vulnerability
Bus Booking Script is an online bus booking management system based on PHP and MySQL. A SQL injection vulnerability exists in Bus Booking Script. A remote attacker can obtain sensitive data e.g., current database user, mysql user by sending the 'spid' parameter to the admin/viewseatseller.php fil...
Bus Booking Script admin/new_master.php file cross-site request forgery vulnerability
Bus Booking Script is an online bus booking management system based on PHP and MySQL. A cross-site request forgery vulnerability exists in Bus Booking Script. A remote attacker can exploit this vulnerability to perform unauthorized operations via the admin/newmaster.php file...
Bus Booking Script Cross-Site Scripting Vulnerability
Bus Booking Script is an online bus booking management system based on PHP and MySQL. A cross-site scripting vulnerability exists in Bus Booking Script. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...
IBM Integration Bus Information Disclosure Vulnerability (CNVD-2017-37859)
IBM Integration Bus formerly known as IBM WebSphere Message Broker is an enterprise service bus ESB product from IBM. The product provides connectivity and common data transformations for Service Oriented Architecture SOA environments and non-SOA environments. An information disclosure...
Joomla JB Bus 2.3.0 SQL Injection
Title: Joomla JB Bus 2.3.0 SQL Injection Credit: Bilal KARDADOU Vendor: https://joombooking.com URL: https://extensions.joomla.org/extensions/extension/vertical-markets/booking-a-reservations/jbtransport/ Product: 'Joomla JB Bus component version 2.3.0' Developer: Joombooking Last updated: Apr 19...
Joomla JB Bus 2.3.0 SQL Injection Vulnerability
Exploit for php platform in category web applications Title: Joomla JB Bus 2.3.0 SQL Injection Credit: Bilal KARDADOU Vendor: https://joombooking.com URL: https://extensions.joomla.org/extensions/extension/vertical-markets/booking-a-reservations/jbtransport/ Product: 'Joomla JB Bus component...
Cross site request forgery (csrf)
Bus Booking Script has CSRF via admin/newmaster.php...
Design/Logic Flaw
Bus Booking Script has XSS via the results.php datepicker parameter or the admin/newmaster.php spemail parameter...
CVE-2017-17828
Bus Booking Script has XSS via the results.php datepicker parameter or the admin/newmaster.php spemail parameter...
CVE-2017-17828
Bus Booking Script has XSS via the results.php datepicker parameter or the admin/newmaster.php spemail parameter...
Sql injection
Bus Booking Script has SQL Injection via the admin/viewseatseller.php spid parameter or the admin/viewmember.php memid parameter...
CVE-2017-17830
Bus Booking Script has CSRF via admin/newmaster.php...
CVE-2017-17829
Bus Booking Script has SQL Injection via the admin/viewseatseller.php spid parameter or the admin/viewmember.php memid parameter...
CVE-2017-17830
Bus Booking Script has CSRF via admin/newmaster.php...
CVE-2017-17829
The CVE-2017-17829 entry corresponds to a SQL injection vulnerability in Bus Booking Script (PHP/MySQL). Affected components are the admin/view_seatseller.php sp_id parameter and the admin/view_member.php memid parameter, as described across multiple sources (NVD, CNVD, RH Red Hat, CVE lists). Th...
CVE-2017-17830
CVE-2017-17830 affects Bus Booking Script, with a cross-site request forgery (CSRF) vulnerability found in admin/new_master.php. The connected documents consistently describe CSRF via this endpoint as the issue; no explicit product versions, root-cause detail beyond CSRF, or remediation steps are...
CVE-2017-17830
Bus Booking Script has CSRF via admin/newmaster.php...
CVE-2017-17828
CVE-2017-17828 affects Bus Booking Script (PHP/MySQL). The vulnerability is a Cross-Site Scripting (XSS) flaw exploitable via the results.php datepicker parameter or the admin/new_master.php spemail parameter. The connected sources confirm the same XSS description across multiple feeds; no vendor...