WordPress Plugin Salon booking system 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

Salon booking system < 10.0 - Unauthenticated Arbitrary File Deletion

Description The Salon booking system plugin for WordPress is vulnerable to arbitrary file deletion in all versions up to, and including, 9.8. This is due to the plugin not properly validating the path of an uploaded file prior to deleting it. This makes it possible for unauthenticated attackers t...

CVE-2024-5069

A vulnerability, which was classified as critical, has been found in SourceCodester Simple Online Mens Salon Management System 1.0. Affected by this issue is some unknown functionality of the file viewservice.php. The manipulation of the argument id leads to sql injection. The attack may be...

CVE-2024-5069

A vulnerability, which was classified as critical, has been found in SourceCodester Simple Online Mens Salon Management System 1.0. Affected by this issue is some unknown functionality of the file viewservice.php. The manipulation of the argument id leads to sql injection. The attack may be...

CVE-2024-5069

The CVE-2024-5069 vulnerability affects SourceCodester Simple Online Mens Salon Management System 1.0, specifically the view_service.php file. Affected functionality allows manipulation of the id argument, leading to SQL injection . The issue can be exploited remotely, and the vulnerability has b...

CVE-2024-5069 SourceCodester Simple Online Mens Salon Management System view_service.php sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Simple Online Mens Salon Management System 1.0. Affected by this issue is some unknown functionality of the file viewservice.php. The manipulation of the argument id leads to sql injection. The attack may be...

CVE-2023-48319

Improper Privilege Management vulnerability in Salon Booking System Salon booking system allows Privilege Escalation.This issue affects Salon booking system: from n/a through 8.6...

CVE-2023-48319

Improper Privilege Management vulnerability in Salon Booking System Salon booking system allows Privilege Escalation.This issue affects Salon booking system: from n/a through 8.6...

CVE-2023-48319 WordPress Salon booking system plugin < 8.7 - Editor+ Privilege Escalation vulnerability

Improper Privilege Management vulnerability in Salon Booking System Salon booking system allows Privilege Escalation.This issue affects Salon booking system: from n/a through 8.6...

CVE-2023-48319 WordPress Salon booking system plugin < 8.7 - Editor+ Privilege Escalation vulnerability

Improper Privilege Management vulnerability in Salon Booking System Salon booking system allows Privilege Escalation.This issue affects Salon booking system: from n/a through 8.6...

PT-2024-34390 · Unknown · Sourcecodester Simple Online Mens Salon Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Online Mens Salon Management System version 1.0 Description: A critical issue has been found in the system, affecting some unknown functionality of the file view service.php. The manipulation of the id argument leads to...

PT-2024-13580 · Unknown · Salon Booking System

Name of the Vulnerable Software and Affected Versions: Salon Booking System versions n/a through 8.6 Description: The issue is related to Improper Privilege Management, allowing Privilege Escalation in the Salon Booking System. Recommendations: For versions n/a through 8.6, update to a version th...

WordPress plugin Salon booking system 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPress...

Simple Online Mens Salon Management System SQL注入漏洞

Simple Online Mens Salon Management System is an open source men's salon management system. SourceCodester Simple Online Mens Salon Management System version 1.0 suffers from a SQL injection vulnerability that stems from a parameter id in the file viewservice.php that can lead to SQL injection...

WordPress Salon booking system plugin <= 9.6.5 - Editor+ Stored XSS via Email Settings vulnerability

Editor+ Stored XSS via Email Settings vulnerability discovered by Bob Matyas in WordPress Plugin Salon booking system versions = 9.6.5...

WordPress Salon booking system plugin <= 9.6.5 - Editor+ Stored XSS vulnerability

Editor+ Stored XSS vulnerability discovered by cyc707 in WordPress Plugin Salon booking system versions = 9.6.5...

WordPress Salon booking system plugin <= 9.6.5 - Settings Update via CSRF vulnerability

Settings Update via CSRF vulnerability discovered by Bob Matyas in WordPress Plugin Salon booking system versions = 9.6.5...

CVE-2024-2603

The Salon booking system WordPress plugin through 9.6.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admin or editor depending on Salon booking system WordPress plugin through 9.6.5 configuration to perform Stored Cross-Site Scripting attacks...

CVE-2024-2429

The Salon booking system WordPress plugin through 9.6.5 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

CVE-2024-2439

The Salon booking system WordPress plugin through 9.6.5 does not sanitise and escape some of its settings, which could allow high privilege users such as Editor to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...