PT-2023-27793 · Phpjabbers · Phpjabbers Bus Reservation System

Name of the Vulnerable Software and Affected Versions: PHP Jabbers Bus Reservation System version 1.1 Description: A vulnerability was found in the PHP Jabbers Bus Reservation System, affecting some unknown functionality of the file /index.php. The manipulation of the pickup id argument in the...

PHPJabbers Bus Reservation System 1.1 SQL Injection

Exploit Title: PHPJabbers Bus Reservation System 1.1 - SQL Injection Exploit Author: CraCkEr Date: 20/07/2023 Vendor: PHPJabbers Vendor Homepage: https://www.phpjabbers.com/ Software Link: https://www.phpjabbers.com/bus-reservation-system/ Tested on: Windows 10 Pro Impact: Database Access CVE:...

PT-2023-27590 · WordPress · Bus Ticket Booking With Seat Reservation

Name of the Vulnerable Software and Affected Versions: The Bus Ticket Booking with Seat Reservation plugin for WordPress versions up to, and including, 5.2.3 Description: The issue arises from insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject...

Bus Ticket Booking with Seat Reservation < 5.2.4 - Reflected XSS

Description The plugin does not sanitise and escape the tabdate and tabdater parameters before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

WordPress Bus Ticket Booking with Seat Reservation Plugin <= 5.2.3 is vulnerable to Cross Site Scripting (XSS)

Software Bus Ticket Booking with Seat Reservation Type Plugin Vulnerable versions = 5.2.3 Fixed in 5.2.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-4067 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID ff22313121e4...

CVE-2020-111008

The connected advisories confirm CVE-2020-111008 affects Git via the credential helper flow. Malicious URLs with a newline, empty host, or missing a scheme could cause Git to reveal credentials for an unintended host; the issue arises from under-specified credential patterns. The MGASA-2020-0181 ...

WordPress Court Reservation – Manage Your Court Bookings Online Plugin <= 1.9.0 is vulnerable to Cross Site Scripting (XSS)

Software Court Reservation – Manage Your Court Bookings Online Type Plugin Vulnerable versions = 1.9.0 Fixed in 1.9.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID b8d73c11bad9...

CVE-2023-25468

Cross-Site Request Forgery CSRF vulnerability in Reservation.Studio Reservation.Studio widget plugin = 1.0.11 versions...

CVE-2023-37151

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-2246. Reason: This candidate is a reservation duplicate of CVE-2023-2246. Notes: All CVE users should reference CVE-2023-2246 instead of this candidate. All references and descriptions in this candidate have been removed to...

CVE-2023-3327

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-35823. Reason: This candidate is a reservation duplicate of CVE-2023-35823. Notes: All CVE users should reference CVE-2023-35823 instead of this candidate. All references and descriptions in this candidate have been removed t...

SUSE CVE-2023-35825

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-3141. Reason: This candidate is a reservation duplicate of CVE-2023-3141. Notes: All CVE users should reference CVE-2023-3141 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental...

CVE-2023-3309

A vulnerability classified as problematic was found in SourceCodester Resort Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file ?page=rooms of the component Manage Room Page. The manipulation of the argument Cottage Number leads to cross site scripting...

Cross site scripting

A vulnerability classified as problematic was found in SourceCodester Resort Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file ?page=rooms of the component Manage Room Page. The manipulation of the argument Cottage Number leads to cross site scripting...

CVE-2023-3309

CVE-2023-3309 affects SourceCodester Resort Reservation System 1.0 with a cross-site scripting flaw in the Manage Room Page (?page=rooms). The vulnerability arises from manipulating the Cottage Number argument, enabling remote exploitation. Multiple connected records confirm the issue; a PoC is i...

CVE-2023-3309 SourceCodester Resort Reservation System Manage Room Page ?page=rooms cross site scripting

A vulnerability classified as problematic was found in SourceCodester Resort Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file ?page=rooms of the component Manage Room Page. The manipulation of the argument Cottage Number leads to cross site scripting...

PT-2023-24181 · Sourcecodester · Resort Reservation System

Name of the Vulnerable Software and Affected Versions: SourceCodester Resort Reservation System version 1.0 Description: A problematic vulnerability was found in the Manage Room Page component, specifically in the file ?page=rooms. The manipulation of the Cottage Number argument leads to cross-si...

Resort Reservation System 跨站脚本漏洞

Resort Reservation System is a Resort Reservation System by Carlo Montero Personal Developer. A cross-site scripting vulnerability exists in Resort Reservation System version 1.0, which stems from a problem with the file ?page=rooms, where manipulation of the parameter Cottage Numbe can lead to...

CVE-2023-33624

Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-31472. Reason: This record is a reservation duplicate of CVE-2023-31472. Notes: All CVE users should reference CVE-2023-31472 instead of this record. All references and descriptions in this record have been removed to prevent...

CVE-2023-33624

DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-31472. Reason: This record is a reservation duplicate of CVE-2023-31472. Notes: All CVE users should reference CVE-2023-31472 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage...

PT-2023-24411 · Undefined · Undefined

‼ CVE-2023-33624 ‼ REJECT DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-31472. Reason: This record is a reservation duplicate of CVE-2023-31472. Notes: All CVE users should reference CVE-2023-31472 instead of this record. All references and descriptions in this record have been removed to...