Booking Core 1.7.0
Approved changes feed: RSS · Atom
cpe:2.3:a:bookingcore:booking_core:1.7.0:*:*:*:*:*:*:*part: a version: 1.7.0 update: *
| Vendor | Bookingcore (f087a7fa-0e3b-588b-a94e-001790c16ebc) |
|---|---|
| Product | Booking Core (08d9fef4-e1b2-5ceb-af6f-92fcd3614b86) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-27379 |
vulnerable | 2026-06-08 05:23:52.659871 |
Details available
Cross Site Request Forgery (CSRF) vulnerability in Booking Core - Ultimate Booking System Booking Core 1.7.0 . The CSRF token is not being validated when the request is sent as a GET method. This results in an unauthorized change in the user's email ID, which can later be used to reset the password. The new password will be sent to a modified email ID.
Published: 2021-07-14T14:38:17.000Z
Updated: 2024-08-04T16:11:36.583Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-25445 |
vulnerable | 2026-06-08 05:22:36.734685 |
Details available
The “Subscribe” feature in Ultimate Booking System Booking Core 1.7.0 is vulnerable to CSV formula injection. The input containing the excel formula is not being sanitized by the application. As a result when admin in backend download and open the csv, content of the cells are executed.
Published: 2021-07-14T14:40:48.000Z
Updated: 2024-08-04T15:33:05.592Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-25444 |
vulnerable | 2026-06-08 05:22:36.734271 |
Details available
Cross Site Scripting (XSS) vulnerability in Booking Core - Ultimate Booking System Booking Core 1.7.0 via the (1) "About Yourself” section under the “My Profile” page, " (2) “Hotel Policy” field under the “Hotel Details” page, (3) “Pricing code” and “name” fields under the “Manage Tour” page, and (4) all the labels under the “Menu” section.
Published: 2021-07-14T14:35:24.000Z
Updated: 2024-08-04T15:33:05.559Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.