Doditsolutions

Airbnb Clone Script

6 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.2

CVE-2019-25494

Exploit
  • EPSS 0.4%
  • Veröffentlicht 27.02.2026 17:23:36
  • Zuletzt bearbeitet 13.03.2026 14:37:09

Homey BNB V4 contains an SQL injection vulnerability in the administration panel login that allows unauthenticated attackers to bypass authentication by injecting SQL syntax into username and password fields. Attackers can submit SQL operators like '...

7.5

CVE-2019-25493

Exploit
  • EPSS 0.09%
  • Veröffentlicht 27.02.2026 17:23:35
  • Zuletzt bearbeitet 06.03.2026 21:00:18

Homey BNB V4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'val' parameter. Attackers can send GET requests to the admin/getrecord.php endpoint with mali...

7.5

CVE-2019-25492

Exploit
  • EPSS 0.09%
  • Veröffentlicht 27.02.2026 17:23:34
  • Zuletzt bearbeitet 06.03.2026 21:00:06

Homey BNB V4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'pt' parameter. Attackers can send GET requests to the admin/getcmsdata.php endpoint with mali...

7.5

CVE-2019-25491

Exploit
  • EPSS 0.09%
  • Veröffentlicht 27.02.2026 17:23:33
  • Zuletzt bearbeitet 06.03.2026 21:00:23

Homey BNB V4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the catid parameter. Attackers can send GET requests to the admin/cms_getpagetitle.php endpoint wi...

7.5

CVE-2019-25490

Exploit
  • EPSS 0.09%
  • Veröffentlicht 27.02.2026 17:23:32
  • Zuletzt bearbeitet 06.03.2026 20:56:29

Homey BNB V4 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'id' parameter. Attackers can send GET requests to the admin/edit.php endpoint with time-based ...

9.1

CVE-2019-25489

Exploit
  • EPSS 0.14%
  • Veröffentlicht 27.02.2026 17:23:31
  • Zuletzt bearbeitet 06.03.2026 20:56:05

Homey BNB V4 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the hosting_id parameter. Attackers can send GET requests to the rooms/ajax_refresh_subtotal endpoi...