Homey Bnb (Airbnb Clone Script)
Approved changes feed: RSS · Atom
cpe:2.3:a:doditsolutions:homey_bnb_(airbnb_clone_script):*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Doditsolutions (d7d23672-5891-5e63-8841-d7f5745695de) |
|---|---|
| Product | Homey Bnb (Airbnb Clone Script) (4f748953-3c9c-50ee-87c5-55186f100150) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-25494 |
vulnerable | 2026-06-08 05:13:42.442053 |
Homey BNB V4 SQL Injection Authentication Bypass via Admin Panel
HIGH (8.2)
Homey BNB V4 contains an SQL injection vulnerability in the administration panel login that allows unauthenticated attackers to bypass authentication by injecting SQL syntax into username and password fields. Attackers can submit SQL operators like '=' 'or' in both credentials to manipulate the authentication query and gain unauthorized access to the admin panel.
Published: 2026-02-27T17:23:36.185Z
Updated: 2026-04-07T14:04:43.332Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25493 |
vulnerable | 2026-06-08 05:13:42.441743 |
Homey BNB V4 SQL Injection via getrecord.php
HIGH (8.2)
Homey BNB V4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'val' parameter. Attackers can send GET requests to the admin/getrecord.php endpoint with malicious 'val' values to extract sensitive database information.
Published: 2026-02-27T17:23:35.222Z
Updated: 2026-04-07T14:04:42.678Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25492 |
vulnerable | 2026-06-08 05:13:42.441411 |
Homey BNB V4 SQL Injection via getcmsdata.php
HIGH (8.2)
Homey BNB V4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'pt' parameter. Attackers can send GET requests to the admin/getcmsdata.php endpoint with malicious 'pt' values to extract sensitive database information.
Published: 2026-02-27T17:23:34.010Z
Updated: 2026-04-07T14:04:41.977Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25491 |
vulnerable | 2026-06-08 05:13:42.440974 |
Homey BNB V4 SQL Injection via cms_getpagetitle.php
HIGH (8.2)
Homey BNB V4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the catid parameter. Attackers can send GET requests to the admin/cms_getpagetitle.php endpoint with malicious catid values to extract sensitive database information.
Published: 2026-02-27T17:23:33.151Z
Updated: 2026-04-07T14:04:41.216Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25490 |
vulnerable | 2026-06-08 05:13:42.440614 |
Homey BNB V4 SQL Injection via admin edit.php
HIGH (8.2)
Homey BNB V4 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'id' parameter. Attackers can send GET requests to the admin/edit.php endpoint with time-based SQL injection payloads to extract sensitive database information.
Published: 2026-02-27T17:23:32.329Z
Updated: 2026-04-07T14:04:40.470Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25489 |
vulnerable | 2026-06-08 05:13:42.439442 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.