← Back

Bestsoftinc

bestsoftinc

5 CVEs • 3 products

Products (3)

Click to collapse
Toggle
Advance Hotel Booking System
advance_hotel_booking_system
2 CVEs
Online Hotel Booking System
online_hotel_booking_system
2 CVEs
Car Rental System
car_rental_system
1 CVE

CVEs (5)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2017-20125
1Bestsoftinc
1Online Hotel Booking System
Nov 21, 2024
Jun 30, 2022
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
A vulnerability classified as critical was found in Online Hotel Booking System Pro 1.2. Affected by this vulnerability is an unknown functionality of the file /roomtype-details.php. The manipulation of the argument tid...Show more
A vulnerability classified as critical was found in Online Hotel Booking System Pro 1.2. Affected by this vulnerability is an unknown functionality of the file /roomtype-details.php. The manipulation of the argument tid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.Show less
CVE-2017-20124
1Bestsoftinc
1Online Hotel Booking System
Nov 21, 2024
Jun 30, 2022
N/A· v4
8.8 HIGH· v3
6.5 MEDIUM· v2
A vulnerability classified as critical has been found in Online Hotel Booking System Pro Plugin 1.0. Affected is an unknown function of the file /front/roomtype-details.php. The manipulation of the argument tid leads to...Show more
A vulnerability classified as critical has been found in Online Hotel Booking System Pro Plugin 1.0. Affected is an unknown function of the file /front/roomtype-details.php. The manipulation of the argument tid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.Show less
CVE-2020-15535
1Bestsoftinc
1Car Rental System
Jun 17, 2026
Jul 5, 2020
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
An issue was discovered in the bestsoftinc Car Rental System plugin through 1.3 for WordPress. Persistent XSS can occur via any of the registration fields.
CVE-2014-4035
1Bestsoftinc
1Advance Hotel Booking System
May 6, 2026
Jun 11, 2014
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in booking_details.php in Best Soft Inc. (BSI) Advance Hotel Booking System 2.0 allows remote attackers to inject arbitrary web script or HTML via the title parameter.
CVE-2010-4814
1Bestsoftinc
1Advance Hotel Booking System
Apr 29, 2026
Jul 8, 2011
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in index1.php in Best Soft Inc. (BSI) Advance Hotel Booking System 1.0 allows remote attackers to execute arbitrary SQL commands via the page parameter.