Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

6 records

Vendor: Doditsolutions Component: Airbnb Clone Script Clear all filters
TI-2019-15547 CVE-2019-25494 · GHSA-22p3-cw83-672h

Homey BNB V4 SQL Injection Authentication Bypass via Admin Panel

Priority HIGH 77

Homey BNB V4 contains an SQL injection vulnerability in the administration panel login that allows unauthenticated attackers to bypass authentication by injecting SQL syntax into username and password fields.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00464 Published 2026-02-27 No fix listed CWE-89
TI-2019-15546 CVE-2019-25493 · GHSA-jw6x-gh8v-8x7w

Homey BNB V4 SQL Injection via getrecord.php

Priority HIGH 77

Homey BNB V4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'val' parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00366 Published 2026-02-27 No fix listed CWE-89
TI-2019-15545 CVE-2019-25492 · GHSA-p7f5-m66f-fmfw

Homey BNB V4 SQL Injection via getcmsdata.php

Priority HIGH 77

Homey BNB V4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'pt' parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00366 Published 2026-02-27 No fix listed CWE-89
TI-2019-15544 CVE-2019-25491 · GHSA-3vq4-2c4v-g9jf

Homey BNB V4 SQL Injection via cms_getpagetitle.php

Priority HIGH 77

Homey BNB V4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the catid parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00366 Published 2026-02-27 No fix listed CWE-89
TI-2019-15543 CVE-2019-25490 · GHSA-7vh4-6xxj-cp37

Homey BNB V4 SQL Injection via admin edit.php

Priority HIGH 77

Homey BNB V4 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'id' parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00366 Published 2026-02-27 No fix listed CWE-89
TI-2019-15542 CVE-2019-25489 · GHSA-gg87-rfp4-hx5w

Homey BNB V4 SQL Injection via ajax_refresh_subtotal

Priority HIGH 77

Homey BNB V4 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the hosting_id parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00445 Published 2026-02-27 No fix listed CWE-89