Lucene search
+L

3637 matches found

Packet Storm
Packet Storm
added 2021/08/02 12:00 a.m.421 views

Online Hotel Reservation System 1.0 Cross Site Scripting

Exploit Title: Online Hotel Reservation System 1.0 - 'Multiple' Cross-site scripting XSS Date: 2021-08-02 Exploit Author: Mohammad Koochaki Vendor Homepage: https://www.sourcecodester.com/php/13492/online-hotel-reservation-system-phpmysqli.html Software Link:...

SaveExploits0
zdt
zdt
added 2021/08/01 12:00 a.m.155 views

Online Hotel Reservation System 1.0 - (Multiple) Cross-site scripting Vulnerability

Exploit Title: Online Hotel Reservation System 1.0 - 'Multiple' Cross-site scripting XSS Exploit Author: Mohammad Koochaki Vendor Homepage: https://www.sourcecodester.com/php/13492/online-hotel-reservation-system-phpmysqli.html Software Link:...

0.2AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2021/07/14 5:31 p.m.77 views

CVE-2021-3648

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority for the following reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-3530. Reason: This candidate is a reservation duplicate of CVE-2021-3530. Notes: All CVE users should reference CVE-2021-3530 instead of this...

7.5CVSS6.4AI score0.024EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2021/06/02 1:15 p.m.7 views

CVE-2021-26940

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-33500. Reason: This candidate is a reservation duplicate of CVE-2021-33500. Notes: All CVE users should reference CVE-2021-33500 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

5.3AI score
SaveExploits0References1
Code423n4
Code423n4
added 2021/06/02 12:00 a.m.9 views

Witch lock vault waiting for better price

Handle adelamo Vulnerability details Impact On the Witch, you can grab any under collateralized vault for X amount of time without requiring any payment of collateral. function grabbytes12 vaultId public DataTypes.Vault memory vault = cauldron.vaultsvaultId; vaultOwnersvaultId = vault.owner;...

6.7AI score
SaveExploits0
OSV
OSV
added 2021/05/31 3:39 p.m.11 views

UVI-2021-1000045 KEYS: trusted: Fix TPM reservation for seal/unseal

KEYS: trusted: Fix TPM reservation for seal/unseal This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.33 by commit...

7.2AI score
SaveExploits0
OSV
OSV
added 2021/05/31 3:39 p.m.17 views

GSD-2021-1000041 KEYS: trusted: Fix TPM reservation for seal/unseal

KEYS: trusted: Fix TPM reservation for seal/unseal This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.11.17 by commit...

7.2AI score
SaveExploits0
OSV
OSV
added 2021/05/31 3:39 p.m.16 views

GSD-2021-1000045 KEYS: trusted: Fix TPM reservation for seal/unseal

KEYS: trusted: Fix TPM reservation for seal/unseal This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.33 by commit...

7.2AI score
SaveExploits0
OSV
OSV
added 2021/05/31 3:39 p.m.11 views

UVI-2021-1000041 KEYS: trusted: Fix TPM reservation for seal/unseal

KEYS: trusted: Fix TPM reservation for seal/unseal This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.11.17 by commit...

7.2AI score
SaveExploits0
ThreatPost
ThreatPost
added 2021/05/24 7:33 p.m.47 views

Reservation System Fixes Easy-to-Exploit XSS Bug

An easy-to-exploit bug impacting the WordPress plugin ReDi Restaurant Reservation allows unauthenticated attackers to pilfer reservation data and customer personal identifiable information by simply submitting a malicious snippet of JavaScript code into the reservation comment field. The bug...

6.1CVSS6.4AI score0.05501EPSS
SaveExploits5References9
zdt
zdt
added 2021/05/24 12:00 a.m.61 views

WordPress ReDi Restaurant Reservation 21.0307 Plugin - (Comment) Stored Cross-Site Scripting

Exploit Title: WordPress Plugin ReDi Restaurant Reservation 21.0307 - 'Comment' Stored Cross-Site Scripting XSS Exploit Author: Bastijn Ouwendijk Vendor Homepage: https://reservationdiary.eu/ Software Link: https://wordpress.org/plugins/redi-restaurant-reservation/ Version: 21.0307 and earlier...

6.1CVSS6.3AI score0.05501EPSS
SaveExploits5
Packet Storm
Packet Storm
added 2021/05/24 12:00 a.m.177 views

WordPress ReDi Restaurant Reservation 21.0307 Cross Site Scripting

Exploit Title: WordPress Plugin ReDi Restaurant Reservation 21.0307 - 'Comment' Stored Cross-Site Scripting XSS Date: 2021-05-10 Exploit Author: Bastijn Ouwendijk Vendor Homepage: https://reservationdiary.eu/ Software Link: https://wordpress.org/plugins/redi-restaurant-reservation/ Version: 21.03...

6.3AI score0.05501EPSS
SaveExploits5
Exploit DB
Exploit DB
added 2021/05/24 12:00 a.m.233 views

WordPress Plugin ReDi Restaurant Reservation 21.0307 - 'Comment' Stored Cross-Site Scripting (XSS)

Exploit Title: WordPress Plugin ReDi Restaurant Reservation 21.0307 - 'Comment' Stored Cross-Site Scripting XSS Date: 2021-05-10 Exploit Author: Bastijn Ouwendijk Vendor Homepage: https://reservationdiary.eu/ Software Link: https://wordpress.org/plugins/redi-restaurant-reservation/ Version: 21.03...

6.1CVSS6.2AI score0.05501EPSS
SaveExploits5
CNVD
CNVD
added 2021/05/20 12:00 a.m.43 views

WordPress plugin cross-site scripting vulnerability (CNVD-2021-36523)

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress Plugin is a WordPress open source application plugin . A cross-site scripting vulnerability exists in versions o...

6.1CVSS5.6AI score0.05501EPSS
SaveExploits5References1
OSV
OSV
added 2021/05/17 5:15 p.m.7 views

CVE-2021-24299

The ReDi Restaurant Reservation WordPress plugin before 21.0426 provides the functionality to let users make restaurant reservations. These reservations are stored and can be listed on an 'Upcoming' page provided by the plugin. An unauthenticated user can fill in the form to make a restaurant...

6.1CVSS6.4AI score0.05501EPSS
SaveExploits5References2
NVD
NVD
added 2021/05/17 5:15 p.m.17 views

CVE-2021-24299

The ReDi Restaurant Reservation WordPress plugin before 21.0426 provides the functionality to let users make restaurant reservations. These reservations are stored and can be listed on an 'Upcoming' page provided by the plugin. An unauthenticated user can fill in the form to make a restaurant...

6.1CVSS0.05501EPSS
SaveExploits5References2
Prion
Prion
added 2021/05/17 5:15 p.m.24 views

Cross site scripting

The ReDi Restaurant Reservation WordPress plugin before 21.0426 provides the functionality to let users make restaurant reservations. These reservations are stored and can be listed on an 'Upcoming' page provided by the plugin. An unauthenticated user can fill in the form to make a restaurant...

4.3CVSS5.9AI score0.05501EPSS
SaveExploits5References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/05/17 5:15 p.m.5 views

CVE-2021-24299

The ReDi Restaurant Reservation WordPress plugin before 21.0426 provides the functionality to let users make restaurant reservations. These reservations are stored and can be listed on an 'Upcoming' page provided by the plugin. An unauthenticated user can fill in the form to make a restaurant...

6.1CVSS6.3AI score0.05501EPSS
SaveExploits5References3Affected Software1
CVE
CVE
added 2021/05/17 4:48 p.m.128 views

CVE-2021-24299

The CVE-2021-24299 entry concerns the ReDi Restaurant Reservation WordPress plugin (versions before 21.0426). An unauthenticated user can submit a reservation with a crafted Comment field that is not properly validated, enabling stored XSS. The payload is later executed when the plugin loads the ...

6.1CVSS6AI score0.05501EPSS
SaveExploits5References2Affected Software1
Packet Storm
Packet Storm
added 2021/05/17 12:00 a.m.203 views

Dental Clinic Appointment Reservation System 1.0 Cross Site Request Forgery

Exploit Title: Dental Clinic Appointment Reservation System 1.0 - Cross Site Request Forgery Add Admin Date: 15-05-2021 Exploit Author: Reza Afsahi Vendor Homepage: https://www.sourcecodester.com/php/6848/appointment-reservation-system.html Software Link:...

SaveExploits0
Rows per page
Query Builder