Read the docs

Doditsolutions

Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high7CVSS 7.0–8.9

Exploited now

Doditsolutions records in CISA KEV

No Doditsolutions vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Airbnb Clone Script 6 records HIGH Bus Booking Script 2 records LOW Busbooking-script 1 record LOW

Records

6 records in Airbnb Clone Script · all components

TI-2019-15547 CVE-2019-25494 · GHSA-22p3-cw83-672h

Homey BNB V4 SQL Injection Authentication Bypass via Admin Panel

Priority HIGH 77

Homey BNB V4 contains an SQL injection vulnerability in the administration panel login that allows unauthenticated attackers to bypass authentication by injecting SQL syntax into username and password fields.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00464 Published 2026-02-27 No fix listed CWE-89
TI-2019-15546 CVE-2019-25493 · GHSA-jw6x-gh8v-8x7w

Homey BNB V4 SQL Injection via getrecord.php

Priority HIGH 77

Homey BNB V4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'val' parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00366 Published 2026-02-27 No fix listed CWE-89
TI-2019-15545 CVE-2019-25492 · GHSA-p7f5-m66f-fmfw

Homey BNB V4 SQL Injection via getcmsdata.php

Priority HIGH 77

Homey BNB V4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'pt' parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00366 Published 2026-02-27 No fix listed CWE-89
TI-2019-15544 CVE-2019-25491 · GHSA-3vq4-2c4v-g9jf

Homey BNB V4 SQL Injection via cms_getpagetitle.php

Priority HIGH 77

Homey BNB V4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the catid parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00366 Published 2026-02-27 No fix listed CWE-89
TI-2019-15543 CVE-2019-25490 · GHSA-7vh4-6xxj-cp37

Homey BNB V4 SQL Injection via admin edit.php

Priority HIGH 77

Homey BNB V4 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'id' parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00366 Published 2026-02-27 No fix listed CWE-89
TI-2019-15542 CVE-2019-25489 · GHSA-gg87-rfp4-hx5w

Homey BNB V4 SQL Injection via ajax_refresh_subtotal

Priority HIGH 77

Homey BNB V4 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the hosting_id parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00445 Published 2026-02-27 No fix listed CWE-89
Open these records in search →