Skip to content
OpenAdvisories

Vendor

Bookgy

5 known vulnerabilities.

Products

Bookgy 5
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.3
    CVE-2025-40619

    Improper access control vulnerability in Bookgy

    Bookgy does not provide for proper authorisation control in multiple areas of the application. This deficiency could allow a malicious actor, without authentication, to reach private areas and/or areas intended for other roles.

    Bookgy Bookgy
  • Critical 9.3
    CVE-2025-40618

    SQL injection vulnerability in Bookgy

    SQL injection vulnerability in Bookgy. This vulnerability could allow an attacker to retrieve, create, update and delete databases by sending an HTTP request through the "IDRESERVA"  parameter in /bkg_imprimir_comprobante.php

    Bookgy Bookgy
  • Critical 9.3
    CVE-2025-40617

    SQL injection vulnerability in Bookgy

    SQL injection vulnerability in Bookgy. This vulnerability could allow an attacker to retrieve, create, update and delete databases by sending an HTTP request through the "IDTIPO", "IDPISTA" and "IDSOCIO" parameters in /bkg_seleccionar_hora_ajax.php.

    Bookgy Bookgy