CVE-2018-8737: Improper Neutralization of Input During Web Page Generation

Bookme Control Panel 2.0 Application is vulnerable to stored XSS within the Customers "Book Me" function. Within the Name and Note aka custName and custNote sections of the Customers screen, the application does not sanitize user-supplied input and renders injected JavaScript code to the user's...

PT-2018-18609

Name of the Vulnerable Software and Affected Versions Bookme Control Panel version 2.0 Description The issue concerns a stored XSS vulnerability within the Customers function, specifically in the Name and Note sections, referred to as custName and custNote. The application fails to sanitize...

CVE-2005-3736

Multiple cross-site scripting XSS vulnerabilities in e-Quick Cart allow remote attackers to inject arbitrary web script or HTML via the 1 strgifttoname parameter in shopgift.asp, 2 strfirstname parameter in shopmaillist.asp, 3 strpid parameter in shopprojectlogin.asp, and 4 Custname parameter in...