CVE-2026-5705 code-projects Online Hotel Booking Booking Endpoint booknow.php cross site scripting

A vulnerability was identified in code-projects Online Hotel Booking 1.0. Affected by this vulnerability is an unknown functionality of the file /booknow.php of the component Booking Endpoint. Such manipulation of the argument roomname leads to cross site scripting. It is possible to launch the...

CVE-2025-5705

A vulnerability was found in code-projects Real Estate Property Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /Admin/Property.php. The manipulation of the argument cmbCat leads to sql injection. It is possible to launch the attack remotely...

CVE-2025-5705

creationtimestamp| type| source ---|---|--- 2025-06-06 00:30:46+00:00| published-proof-of-concept| Telegram/Ye5u7iawGclqBMyVLRzmIkNrHeAFyk5kO9UgV2PswPRSwxs 2025-06-06 02:53:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqvteaan4e2j...

CVE-2025-5705

A vulnerability was found in code-projects Real Estate Property Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /Admin/Property.php. The manipulation of the argument cmbCat leads to sql injection. It is possible to launch the attack remotely...

CVE-2025-5705 code-projects Real Estate Property Management System Property.php sql injection

A vulnerability was found in code-projects Real Estate Property Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /Admin/Property.php. The manipulation of the argument cmbCat leads to sql injection. It is possible to launch the attack remotely...

CVE-2025-5705 code-projects Real Estate Property Management System Property.php sql injection

A vulnerability was found in code-projects Real Estate Property Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /Admin/Property.php. The manipulation of the argument cmbCat leads to sql injection. It is possible to launch the attack remotely...

CVE-2025-5705

CVE-2025-5705 affects code-projects Real Estate Property Management System 1.0. The vulnerability is in an unknown function of the file /Admin/Property.php where manipulating the cmbCat parameter leads to SQL injection. It can be exploited remotely, and the exploit has been disclosed publicly. In...

CVE-2012-5705

Cross-site scripting XSS vulnerability in the settings page admin/settings/hotblocks in the Hotblocks module 6.x-1.x before 6.x-1.8 for Drupal allows remote authenticated users with the "administer hotblocks" permission to inject arbitrary web script or HTML via the "block names."...

CVE-2024-5705

The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions. CWE-863 Hitachi Vantara Pentaho Business Analytics Server versions before 10.2.0...

CVE-2024-5705

creationtimestamp| type| source ---|---|--- 2025-02-20 01:48:26+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114033695504956262 2025-02-20 02:16:51+00:00| seen| https://t.me/cvedetector/18504 2025-02-20 21:17:49+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4816...

CVE-2024-5705

The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions. CWE-863 Hitachi Vantara Pentaho Business Analytics Server versions before...

CVE-2024-5705 Hitachi Vantara Pentaho Business Analytics Server - Incorrect Authorization

The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions. CWE-863 Hitachi Vantara Pentaho Business Analytics Server versions before...

CVE-2024-5705 Hitachi Vantara Pentaho Business Analytics Server - Incorrect Authorization

The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions. CWE-863 Hitachi Vantara Pentaho Business Analytics Server versions before...

CVE-2024-5705

Hitachi Vantara Pentaho Business Analytics Server is affected by CVE-2024-5705 due to incorrect authorization checks. Affected versions include Hitachi Vantara Pentaho BA Server prior to 10.2.0.0 and 9.3.0.9, including 8.3.x, where modules are enabled by default that allow execution of system-lev...

CVE-2017-5705

creationtimestamp| type| source ---|---|--- 2024-08-29 16:29:32+00:00| seen| https://t.me/itsecnews/4642...

Malicious code in wlwz-2312-5705 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b258c6a8a9c5d239967695d5801549f814ef9ce3938858a3c709de22295b4438 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-5705

creationtimestamp| type| source ---|---|--- 2023-10-27 16:17:02+00:00| seen| https://t.me/cibsecurity/73048...

CVE-2023-5705

The VK Filter Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'vkfiltersearch' shortcode in all versions up to, and including, 2.3.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2023-5705

CVE-2023-5705 affects VK Filter Search for WordPress. The vulnerability is a Stored Cross-Site Scripting issue in the plugin’s vk_filter_search shortcode across versions up to 2.3.1, caused by insufficient input sanitization and output escaping of user-supplied attributes. Exploitation requires a...

CVE-2023-5705 VK Filter Search <= 2.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

The VK Filter Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'vkfiltersearch' shortcode in all versions up to, and including, 2.3.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...