📦 Bookgy

A critical SQL injection vulnerability in Bookgy allows attackers to manipulate database operations through unvalidated HTTP parameters. Attackers can execute arbitrary SQL commands to retrieve, modif...

Bookgy contains an authorization bypass vulnerability (CWE-863) that allows unauthenticated attackers to access private areas or functionality intended for other user roles. This affects all Bookgy in...

This reflected XSS vulnerability in Bookgy allows attackers to inject malicious JavaScript via the IDRESERVA parameter in /bkg_imprimir_comprobante.php. When victims click a specially crafted link, th...