Cross site scripting

A vulnerability was found in PHP Jabbers Shuttle Booking Software 1.0. It has been classified as problematic. This affects an unknown part of the file /index.php. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The associated identifier of this...

CVE-2023-4112 PHP Jabbers Shuttle Booking Software index.php cross site scripting

A vulnerability was found in PHP Jabbers Shuttle Booking Software 1.0. It has been classified as problematic. This affects an unknown part of the file /index.php. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The associated identifier of this...

CVE-2023-4112

PHP Jabbers Shuttle Booking Software 1.0 contains a Cross-Site Scripting (XSS) flaw in /index.php. The Nuclei template and ExploitDB entry describe an attacker sending a malicious URL via email/IM to exploit RXSS and potentially steal session tokens or credentials. Root cause: insufficient saniti...

Shuttle Booking Software Cross-Site Scripting Vulnerability

Shuttle Booking Software is a PHP Jabbers open source shuttle booking software. PHP Jabbers Shuttle Booking Software version 1.0 has a cross-site scripting vulnerability , the vulnerability stems from a problem with the file /index.php , which can lead to cross-site scripting...

PHPJabbers Shuttle Booking Software 1.0 Cross Site Scripting

Exploit Title: PHPJabbers Shuttle Booking Software 1.0 - Reflected XSS Exploit Author: CraCkEr Date: 20/07/2023 Vendor: PHPJabbers Vendor Homepage: https://www.phpjabbers.com/ Software Link: https://www.phpjabbers.com/shuttle-booking-software/ Tested on: Windows 10 Pro Impact: Manipulate the...

PT-2023-27803 · Phpjabbers · Php Jabbers Shuttle Booking

Name of the Vulnerable Software and Affected Versions: PHP Jabbers Shuttle Booking Software version 1.0 Description: A vulnerability was found in the software, classified as problematic, affecting an unknown part of the file /index.php. The manipulation leads to cross site scripting, and it is...

Malicious Package

Overview wp-shuttle is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

Exploit for OS Command Injection in Webmin

PoC exploit for CVE-2019-15107 DNSChanger on home routers. The target product/service is Shuttle Tech ADSL Modem-Router 915 WM. The vulnerability class/vector is DNSChanger. The probable entry point is the routerhunter.py script. Notable dependencies/tooling include requests, random, time,...

bookings.gofloridashuttle.com Cross Site Scripting vulnerability OBB-1423807

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

berlin-shuttle.de Cross Site Scripting vulnerability OBB-1407897

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

bookings.floridashuttletransportation.com Cross Site Scripting vulnerability OBB-1282960

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

shuttledirect.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1188829 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

Norwegian Air Shuttle airline kiosk authentication bypass vulnerability vulnerability

The Norwegian Air Shuttle airline kiosk is a series of self-service kiosks for Norwegian Air. An authentication bypass vulnerability exists in the Norwegian Air Shuttle airline kiosk. An attacker could exploit this vulnerability to gain administrator access and network access to the underlying...

Design/Logic Flaw

The Norwegian Air Shuttle aka norwegian.com airline kiosk allows physically proximate attackers to bypass the intended "Please select booking identification" UI step, and obtain administrative privileges and network access on the underlying Windows OS, by accessing a touch-screen print icon to...

CVE-2017-5634

The Norwegian Air Shuttle aka norwegian.com airline kiosk allows physically proximate attackers to bypass the intended "Please select booking identification" UI step, and obtain administrative privileges and network access on the underlying Windows OS, by accessing a touch-screen print icon to...

CVE-2017-5634

The Norwegian Air Shuttle aka norwegian.com airline kiosk allows physically proximate attackers to bypass the intended "Please select booking identification" UI step, and obtain administrative privileges and network access on the underlying Windows OS, by accessing a touch-screen print icon to...

CVE-2017-5634

CVE-2017-5634 affects the Norwegian Air Shuttle airline kiosk. Affected component is the kiosk software used for bookings; root cause is an authentication bypass that lets physically proximate attackers manipulate the print dialog via the touch-screen print icon, bypassing the UI step and potenti...

Shuttle Tech ADSL Wireless 920 WM XSS / Directory Traversal

Exploit Title : Shuttle Tech ADSL WIRELESS 920 WM - Cross Site Scripting Version: Gan9.8U6X-B-TW-R1B0201T1RP Exploit Author : Persian Hack Team Tested on Win Date 2016/12/05 PoC : First We Need To login To Panel And page Parameter Vulnerable to Cross Site Scripting...

Shuttle Tech ADSL Wireless 920 WM - Multiple Vulnerabilities

Shuttle Tech ADSL Wireless 920 WM - Multiple Vulnerabilities Exploit Title : Shuttle Tech ADSL WIRELESS 920 WM - Multiple Vulnerabilities Version: Gan9.8U6X-B-TW-R1B0201T1RP Exploit Author : Persian Hack Team Tested on Win Date 2016/12/05 1. Cross Site Scripting PoC : First We Need To login To...

Shuttle Tech ADSL Wireless 920 WM - Multiple Vulnerabilities

Exploit for hardware platform in category remote exploits Exploit Title : Shuttle Tech ADSL WIRELESS 920 WM - Multiple Vulnerabilities Version: Gan9.8U6X-B-TW-R1B0201T1RP Exploit Author : Persian Hack Team Tested on Win Date 2016/12/05 1. Cross Site Scripting PoC : First We Need To login To Panel...