Hotel Booking System vulnerabilities
3 known vulnerabilities in Hotel Booking System from Phpjabbers. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.8 High severity
Hotel Booking System: Improper Neutralization of Formula Elements in a CSV File
PHPJabbers Hotel Booking System v4.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options
- 7.5 High severity
Hotel Booking System: Uncontrolled Resource Consumption
A lack of rate limiting in the "Login Section, Forgot Email" feature of PHPJabbers Hotel Booking System v4.0 allows attackers to send an excessive amount of reset requests for a legitimate user, leading to a possible Denial of Service (DoS) via a large amount
- 9.8 Critical severity
Hotel Booking System: Generation of Error Message Containing Sensitive Information
User enumeration is found in PHP Jabbers Hotel Booking System v4.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.