25 matches found
CVE-2023-49272: Improper Neutralization of Input During Web Page Generation
Hotel Management v1.0 is vulnerable to multiple authenticated Reflected Cross-Site Scripting vulnerabilities. The 'children' parameter of the reservation.php resource is copied into the HTML document as plain text between tags. Any input is echoed unmodified in the application's response...
PT-2023-31137 · Unknown · Hotel Management
Name of the Vulnerable Software and Affected Versions: Hotel Management version 1.0 Description: The issue concerns multiple authenticated Reflected Cross-Site Scripting vulnerabilities. Specifically, the adults parameter of the "reservation.php" resource is copied into the HTML document as plain...
CVE-2023-49269: Improper Neutralization of Input During Web Page Generation
Hotel Management v1.0 is vulnerable to multiple authenticated Reflected Cross-Site Scripting vulnerabilities. The 'adults' parameter of the reservation.php resource is copied into the HTML document as plain text between tags. Any input is echoed unmodified in the application's response...
PT-2023-31138
Name of the Vulnerable Software and Affected Versions Hotel Management version 1.0 Description The issue concerns multiple authenticated Reflected Cross-Site Scripting vulnerabilities. Specifically, the check in date parameter of the "reservation.php" resource is copied into the HTML document as...
motelvisava.com XSS vulnerability
Open Bug Bounty ID: OBB-605909 Description| Value ---|--- Affected Website:| motelvisava.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...