CVE-2025-58661: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in eZee Technosys eZee Online Hotel Booking Engine online-booking-engine allows Stored XSS.This issue affects eZee Online Hotel Booking Engine: from n/a through = 1.0.0...

CVE-2023-0768: Undefined Security Weakness

The Avirato hotels online booking engine WordPress plugin through 5.0.5 does not validate and escape some of its shortcode attributes before using them in SQL statement/s, which could allow any authenticated users, such as subscriber to perform SQL Injection attacks...

obe-sql.txt

Online Booking engine userid SQL Injection Vulnerability Author: d3b4g Home : www.mvtechies.com email: bl4ckendatgmaildotcom HomE script : http://bookingengine.galaxyweblinks.com/ Risk: High DorK : N/A ------------------------------------------------------------- Exploit:...