CVE-2026-12948

creationtimestamp| type| source ---|---|--- 2026-07-07 16:18:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq2yzanqva24...

CVE-2019-12948

A vulnerability in the web-based management interface of VVX, Trio, SoundStructure, SoundPoint, and SoundStation phones running Polycom UC Software, if exploited, could allow an authenticated, remote attacker with admin privileges to cause a denial of service DoS condition or execute arbitrary co...

CVE-2024-12948

A vulnerability was found in code-projects Travel Management System 1.0. It has been classified as critical. This affects an unknown part of the file /detail.php. The manipulation of the argument pid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2024-12948

creationtimestamp| type| source ---|---|--- 2024-12-26 11:03:33+00:00| seen| https://infosec.exchange/users/cve/statuses/113718788954636657 2024-12-26 11:15:22+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3le7dv6jvsh25 2024-12-26 13:13:37+00:00| seen|...

CVE-2024-12948 code-projects Travel Management System detail.php sql injection

A vulnerability was found in code-projects Travel Management System 1.0. It has been classified as critical. This affects an unknown part of the file /detail.php. The manipulation of the argument pid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2024-12948

CVE-2024-12948 affects the Code-Projects Travel Management System 1.0. The vulnerability is a SQL injection in an unknown portion of /detail.php triggered by manipulating the pid parameter. The issue is exploitable remotely and, per sources, the exploit has been disclosed publicly. Practical impa...

CVE-2024-12948 code-projects Travel Management System detail.php sql injection

A vulnerability was found in code-projects Travel Management System 1.0. It has been classified as critical. This affects an unknown part of the file /detail.php. The manipulation of the argument pid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2020-12948

CVE-2020-12948 is rejected/not used; this entry does not represent an active vulnerability.

CVE-2019-12948

The CVE-2019-12948 entry concerns Polycom UC Software web-based management on VVX, Trio, SoundStructure, SoundPoint and SoundStation phones. A vulnerability exists in the web interface that, when exploited by an authenticated admin, could cause DoS or allow arbitrary code execution. Documents con...

CVE-2017-12948

Core\Admin\PFTemplater.php in the PressForward plugin 4.3.0 and earlier for WordPress has XSS in the PATHINFO to wp-admin/admin.php, related to PHPSELF...

CVE-2017-12948

The CVE-2017-12948 issue affects the WordPress PressForward plugin, specifically Core\Admin\PFTemplater.php in version 4.3.0 and earlier. The vulnerability is a Cross‑Site Scripting (XSS) flaw via PATH_INFO reflected into wp-admin/admin.php, related to PHP_SELF. Multiple sources (Red Hat CVE entr...