7 matches found
CVE-2024-1030
Cogites eReserv 7.7.58 is affected by a cross-site scripting vulnerability in the unknown portion of /front/admin/tenancyDetail.php, triggered by manipulating the id parameter. Exploitation appears remote and is supported by multiple sources in connected documents (e.g., Red Hat/CVE entries and P...
CVE-2024-1029 Cogites eReserv tenancyDetail.php cross site scripting
A vulnerability was found in Cogites eReserv 7.7.58 and classified as problematic. Affected by this issue is some unknown functionality of the file /front/admin/tenancyDetail.php. The manipulation of the argument Nom with the input Dreux"alert'XSS' leads to cross site scripting. The attack may be...
CVE-2024-1026
A vulnerability was found in Cogites eReserv 7.7.58 and classified as problematic. This issue affects some unknown processing of the file front/admin/config.php. The manipulation of the argument id with the input %22%3E%3Cscript%3Ealert%27XSS%27%3C/script%3E leads to cross site scripting. The...
Cross site scripting
A vulnerability was found in Cogites eReserv 7.7.58 and classified as problematic. This issue affects some unknown processing of the file front/admin/config.php. The manipulation of the argument id with the input %22%3E%3Cscript%3Ealert%27XSS%27%3C/script%3E leads to cross site scripting. The...
CVE-2024-1026
Cogites eReserv 7.7.58 is affected by a Cross-Site Scripting (XSS) vulnerability in front/admin/config.php, triggered by manipulating the id parameter to inject a script. The issue is exploitable remotely and the payload demonstrated in sources uses a script alert. Reported across multiple feeds ...
Cogites eReserv Cross-Site Scripting Vulnerability
Cogites eReserv is an online reservation management software from Cogites. A cross-site scripting vulnerability exists in Cogites eReserv version 7.7.58, which originates from a cross-site scripting vulnerability in the /front/admin/tenancyDetail.php file...
PT-2024-16140 · Cogites · Cogites Ereserv
Name of the Vulnerable Software and Affected Versions: Cogites eReserv version 7.7.58 Description: A cross-site scripting issue affects the processing of the file front/admin/config.php. The manipulation of the id argument with a specific input leads to cross-site scripting. This issue can be...