Tubigan Welcome To Our Resort vulnerabilities
2 known vulnerabilities affecting tubigan/welcome_to_our_resort.
Total CVEs
2
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
CRITICAL1HIGH1
Vulnerabilities
Page 1 of 1
CVE-2018-18800P3CRITICALCVSS 9.8PoCv1.02019-05-14
CVE-2018-18800 [CRITICAL] CWE-89 CVE-2018-18800: The Tubigan "Welcome to our Resort" 1.0 software allows SQL Injection via index.php?p=accomodation&q
The Tubigan "Welcome to our Resort" 1.0 software allows SQL Injection via index.php?p=accomodation&q=[SQL], index.php?p=rooms&q=[SQL], or admin/login.php.
nvd
CVE-2018-18802P3HIGHCVSS 8.8v1.02019-06-18
CVE-2018-18802 [HIGH] CWE-352 CVE-2018-18802: The Tubigan "Welcome to our Resort" 1.0 software allows CSRF via admin/mod_users/controller.php?acti
The Tubigan "Welcome to our Resort" 1.0 software allows CSRF via admin/mod_users/controller.php?action=edit.
nvd