Lucene search
K

7 matches found

CVE
CVE
added 2024/01/30 10:0 a.m.34 views

CVE-2024-1030

Cogites eReserv 7.7.58 is affected by a cross-site scripting vulnerability in the unknown portion of /front/admin/tenancyDetail.php, triggered by manipulating the id parameter. Exploitation appears remote and is supported by multiple sources in connected documents (e.g., Red Hat/CVE entries and P...

5.4CVSS5.3AI score0.00117EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2024/01/30 5:31 a.m.9 views

CVE-2024-1029 Cogites eReserv tenancyDetail.php cross site scripting

A vulnerability was found in Cogites eReserv 7.7.58 and classified as problematic. Affected by this issue is some unknown functionality of the file /front/admin/tenancyDetail.php. The manipulation of the argument Nom with the input Dreux"alert'XSS' leads to cross site scripting. The attack may be...

4CVSS6.2AI score0.00065EPSS
Exploits0References2
NVD
NVD
added 2024/01/30 1:15 a.m.8 views

CVE-2024-1026

A vulnerability was found in Cogites eReserv 7.7.58 and classified as problematic. This issue affects some unknown processing of the file front/admin/config.php. The manipulation of the argument id with the input %22%3E%3Cscript%3Ealert%27XSS%27%3C/script%3E leads to cross site scripting. The...

6.1CVSS4.5AI score0.0005EPSS
Exploits0References2
Prion
Prion
added 2024/01/30 1:15 a.m.15 views

Cross site scripting

A vulnerability was found in Cogites eReserv 7.7.58 and classified as problematic. This issue affects some unknown processing of the file front/admin/config.php. The manipulation of the argument id with the input %22%3E%3Cscript%3Ealert%27XSS%27%3C/script%3E leads to cross site scripting. The...

4CVSS6.6AI score0.0005EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2024/01/30 1:0 a.m.46 views

CVE-2024-1026

Cogites eReserv 7.7.58 is affected by a Cross-Site Scripting (XSS) vulnerability in front/admin/config.php, triggered by manipulating the id parameter to inject a script. The issue is exploitable remotely and the payload demonstrated in sources uses a script alert. Reported across multiple feeds ...

6.1CVSS6AI score0.0005EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2024/01/30 12:0 a.m.1 views

Cogites eReserv Cross-Site Scripting Vulnerability

Cogites eReserv is an online reservation management software from Cogites. A cross-site scripting vulnerability exists in Cogites eReserv version 7.7.58, which originates from a cross-site scripting vulnerability in the /front/admin/tenancyDetail.php file...

6.1CVSS6.1AI score0.00065EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2024/01/30 12:0 a.m.3 views

PT-2024-16140 · Cogites · Cogites Ereserv

Name of the Vulnerable Software and Affected Versions: Cogites eReserv version 7.7.58 Description: A cross-site scripting issue affects the processing of the file front/admin/config.php. The manipulation of the id argument with a specific input leads to cross-site scripting. This issue can be...

6.1CVSS4.2AI score0.0005EPSS
Exploits0References4
Rows per page
Query Builder