Hotel Management
Approved changes feed: RSS · Atom
cpe:2.3:a:kashipara_group:hotel_management:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Kashipara Group (908cce17-bbee-5481-a9ff-106a78bca890) |
|---|---|
| Product | Hotel Management (7298d0de-c233-567e-990f-f046076516f0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-49272 |
vulnerable | 2026-06-08 06:14:28.907711 |
Hotel Management v1.0 - Multiple Reflected Cross-Site Scripting (XSS)
MEDIUM (5.4)
Hotel Management v1.0 is vulnerable to multiple authenticated Reflected Cross-Site Scripting vulnerabilities. The 'children' parameter of the reservation.php resource is copied into the HTML document as plain text between tags. Any input is echoed unmodified in the application's response.
Published: 2023-12-20T19:25:08.511Z
Updated: 2025-05-19T14:47:29.612Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-49271 |
vulnerable | 2026-06-08 06:14:28.907102 |
Hotel Management v1.0 - Multiple Reflected Cross-Site Scripting (XSS)
MEDIUM (5.4)
Hotel Management v1.0 is vulnerable to multiple authenticated Reflected Cross-Site Scripting vulnerabilities. The 'check_out_date' parameter of the reservation.php resource is copied into the HTML document as plain text between tags. Any input is echoed unmodified in the application's response.
Published: 2023-12-20T19:24:15.907Z
Updated: 2025-05-19T14:47:07.566Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-49270 |
vulnerable | 2026-06-08 06:14:28.905428 |
Hotel Management v1.0 - Multiple Reflected Cross-Site Scripting (XSS)
MEDIUM (5.4)
Hotel Management v1.0 is vulnerable to multiple authenticated Reflected Cross-Site Scripting vulnerabilities. The 'check_in_date' parameter of the reservation.php resource is copied into the HTML document as plain text between tags. Any input is echoed unmodified in the application's response.
Published: 2023-12-20T19:21:34.658Z
Updated: 2025-05-19T14:46:41.685Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-49269 |
vulnerable | 2026-06-08 06:14:28.903256 |
Hotel Management v1.0 - Multiple Reflected Cross-Site Scripting (XSS)
MEDIUM (5.4)
Hotel Management v1.0 is vulnerable to multiple authenticated Reflected Cross-Site Scripting vulnerabilities. The 'adults' parameter of the reservation.php resource is copied into the HTML document as plain text between tags. Any input is echoed unmodified in the application's response.
Published: 2023-12-20T17:41:53.093Z
Updated: 2025-05-19T14:46:06.910Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.