VYPR

Welcome to our Resort

by Tubigan

CVEs (2)

  • CVE-2018-18800CriMay 14, 2019
    risk 0.67cvss 9.8epss 0.03

    The Tubigan "Welcome to our Resort" 1.0 software allows SQL Injection via index.php?p=accomodation&q=[SQL], index.php?p=rooms&q=[SQL], or admin/login.php.

  • CVE-2018-18802HigJun 18, 2019
    risk 0.57cvss 8.8epss 0.01

    The Tubigan "Welcome to our Resort" 1.0 software allows CSRF via admin/mod_users/controller.php?action=edit.