Sql injection

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0 and classified as critical. This issue affects the function exec of the file booking.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been...

CVE-2023-4866

The CVE refers to SourceCodester Online Tours & Travels Management System 1.0. The issue is a SQL injection in the booking.php file, triggered by manipulating the id argument passed to the exec function. This describes a server-side code path where user-controlled input affects a SQL-executing fu...

CVE-2023-4866 SourceCodester Online Tours & Travels Management System booking.php exec sql injection

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0 and classified as critical. This issue affects the function exec of the file booking.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been...

CVE-2023-4866 SourceCodester Online Tours & Travels Management System booking.php exec sql injection

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0 and classified as critical. This issue affects the function exec of the file booking.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been...

velox-tours.com Cross Site Scripting vulnerability OBB-3487410

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-2619

A vulnerability, which was classified as critical, was found in SourceCodester Online Tours & Travels Management System 1.0. This affects the function exec of the file disapprovedelete.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely...

Sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Online Tours & Travels Management System 1.0. This affects the function exec of the file disapprovedelete.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely...

CVE-2023-2619

CVE-2023-2619 affects SourceCodester Online Tours & Travels Management System 1.0, specifically the file disapprove_delete.php. The vulnerability arises from unsafe handling of the id parameter in the PHP code’s exec function, enabling SQL injection. Exploitation is possible remotely and has been...

CVE-2023-2619 SourceCodester Online Tours & Travels Management System disapprove_delete.php exec sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Online Tours & Travels Management System 1.0. This affects the function exec of the file disapprovedelete.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely...

Online Tours & Travels Management System SQL注入漏洞

Online Tours & Travels Management System is an online travel management system by Mayuri K. Individual developer. Online Tours & Travels Management System suffers from a SQL injection vulnerability, which stems from an incorrect manipulation of the parameter id leading to sql injection...

bangkokfoodtours.com Cross Site Scripting vulnerability OBB-3303399

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

morocco-holidays-tours.com Cross Site Scripting vulnerability OBB-3293252

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

bostonducktours.com Cross Site Scripting vulnerability OBB-3289418

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-1414

The WP VR WordPress plugin before 8.3.0 does not have authorisation and CSRF checks in various AJAX actions, one in particular could allow any authenticated users, such as subscriber to update arbitrary tours...

CVE-2023-1414 WP VR < 8.3.0 - Subscriber+ Arbitrary Tour Update

The WP VR WordPress plugin before 8.3.0 does not have authorisation and CSRF checks in various AJAX actions, one in particular could allow any authenticated users, such as subscriber to update arbitrary tours...

PT-2023-16967 · WordPress · Wp Vr

Name of the Vulnerable Software and Affected Versions: WP VR WordPress plugin versions prior to 8.3.0 Description: The issue concerns a lack of authorization and CSRF checks in various AJAX actions within the WP VR WordPress plugin. This could allow any authenticated user, such as a subscriber, t...

CVE-2023-1590

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0 and classified as critical. This issue affects the function exec of the file admin/operations/currency.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. Th...

CVE-2023-1590

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0 and classified as critical. This issue affects the function exec of the file admin/operations/currency.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. Th...

Sql injection

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0 and classified as critical. This issue affects the function exec of the file admin/operations/currency.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. Th...

CVE-2023-1590 SourceCodester Online Tours & Travels Management System currency.php exec sql injection

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0 and classified as critical. This issue affects the function exec of the file admin/operations/currency.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. Th...