CVE-2025-13673

The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to an unauthenticated SQL Injection via the coupon_code parameter in all versions up to and including 3.9.6. The root cause is insufficient escaping of user-supplied input and insufficient preparation of the S...

Joomla Modern Booking 1.0 Component - coupon Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla Modern Booking - SQL Injection Author: Hamed Izadi IRAN Vendor Homepage : https://extensions.joomla.org/extensions/extension/vertical-markets/booking-a-reservations/modern-booking/ Vendor Homepage :...

Joomla! Component Modern Booking 1.0 - 'coupon' SQL Injection

Exploit Title: Joomla Modern Booking - SQL Injection Author: Hamed Izadi IRAN Vendor Homepage : https://extensions.joomla.org/extensions/extension/vertical-markets/booking-a-reservations/modern-booking/ Vendor Homepage : https://www.unikalus.com/ Category: Webapps Tested on: Ubuntu Versions: 1.0...