CVE-2025-56605

CVE-2025-56605 XSS Cross-Site Scripting Vulnerability CVE-2025-56605 — Reflected XSS in Event Management System 1.0 Description: A reflected Cross-Site Scripting XSS vulnerability exists in register.php of PuneethReddyHC/event-management 1.0. The mobile POST parameter is improperly validated and...

Royal-Event-Management-System-todate-SQL-Injection-Authenticated

Royal Event Management System - 'todate' SQL Injection Authenticated 1. Description: Royal Event Management System 1.0 allows SQL Injection via parameter 'todate' in /royalevent/btndatesreport.php?= Exploiting this issue could allow an attacker to compromise the application, access or modify data...

EUVD-2026-79508

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Event Management. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via SOAP to compromise Oracle...

CVE-2026-62597

Oracle Enterprise Manager Base Platform (component: Event Management ) versions 13.5 and 24.1 are affected by an easily exploitable vulnerability. A low-privileged attacker with network access via SOAP can compromise the platform, resulting in unauthorized creation, deletion, or modification of c...

Nethive-Project

Nethive-Project Sistema de monitoreo de latencia baja a nula Características • Instalación • Inicio rápido • Contribuyentes • Guía de usuario El proyecto Nethive proporciona una infraestructura de gestión de eventos e información de seguridad SIEM potenciada por mediciones automáticas...

WordPress RSVP and Event Management <2.7.8 - Missing Authorization

WordPress RSVP and Event Management plugin before 2.7.8 is susceptible to missing authorization. The plugin does not have any authorization checks when exporting its entries, and the export function is hooked to the init action. An attacker can potentially retrieve sensitive information such as...

CVE-2024-51482-PoC

CVE-2024-51482-PoC Authenticated time-based blind SQL injection exploit for ZoneMinder v1.37. = 1.37.64 Overview This is a proof-of-concept exploit for CVE-2024-51482, a time-based blind SQL injection vulnerability in ZoneMinder's event management functionality. The exploit requires authenticatio...

CVE-2021-42662

CVE-2021-42662 CVE-2021-42662 - オンラインイベント予約・予約システムバージョン2.3.0における格納型クロスサイトスクリプティング脆弱性。 技術的説明: バージョン2.3.0のイベント管理ソフトウェアには、格納型XSS脆弱性が存在します。攻撃者はこの脆弱性を悪用して、Webサーバーを閲覧するユーザーの代わりにJavaScriptを実行させることができ、クッキーの盗難、改ざんなどが可能になります。 影響を受けるコンポーネント - 脆弱なページ - HOLY 脆弱なパラメータ - "reason" 悪用手順: 1...

WordPress MDJM Event Management plugin < 1.7.8.5 - Unauthenticated Arbitrary Post Deletion vulnerability

Unauthenticated Arbitrary Post Deletion vulnerability discovered by Enrico Marcolini Dottor Marc, Claudio Marchesini Dottor Marc in WordPress Plugin Mobile DJ Manager versions 1.7.8.5...

CVE-2026-88802

The MDJM Event Management WordPress plugin before 1.7.8.5 and the Mobile Events Manager WordPress plugin through 1.4.8.3 do not check a capability, a nonce or the type of the record before permanently deleting the post identified in a request to their playlist entry removal, allowing...

CVE-2026-88802

CVE-2026-88802 affects two WordPress plugins: MDJM Event Management (before 1.7.8.5) and Mobile Events Manager (through 1.4.8.3). The root cause is the absence of a capability check, nonce validation, or record-type verification in the plugins' playlist entry removal endpoint. An unauthenticated ...

CVE-2026-88802 MDJM Event Management and Mobile Events Manager - Unauthenticated Arbitrary Post Deletion

The MDJM Event Management WordPress plugin before 1.7.8.5 and the Mobile Events Manager WordPress plugin through 1.4.8.3 do not check a capability, a nonce or the type of the record before permanently deleting the post identified in a request to their playlist entry removal, allowing...

CVE-2021-42667

CVE-2021-42667 CVE-2021-42667 - SQL Injection vulnerability in the Online event booking and reservation system version 2.3.0. Technical description: An SQL Injection vulnerability exists in the Event management software version 2.3.0. An attacker can leverage the vulnerable "id" parameter in the...

CVE-2026-7537

MDJM Event Management = 1.7.8.3 - Authenticated Administrator+ Arbitrary File Upload via 'mdjmemailuploadfile' Parameter The WordPress MDJM Event Management plugin version 1.7.8.3 and prior contains an arbitrary file upload vulnerability that allows authenticated administrators to upload maliciou...

CVE-2025-65354

CVE-2025-65354 — Vulnerabilidad de inyección SQL Resumen Existe una vulnerabilidad de inyección SQL en la aplicación event-management de PuneethReddyHC versión 1.0 debido a un manejo inadecuado de las entradas. Tipo de vulnerabilidad Inyección SQL Componente afectado Endpoint:...

CVE-2025-56243

CVE-2025-56243 - PuneethReddyHC / 活动管理系统 v1.0 中的反射型 XSS 漏洞 标题： register.php 中 eventid 参数导致的反射型跨站脚本（XSS）漏洞 厂商 / 仓库： PuneethReddyHC / event-management 受影响版本： 1.0（测试时为 master 分支/标签） 报告人： Hafiz Pradana Gemilang 披露状态： 已私下通知厂商 — 为保障用户安全，暂不公开漏洞利用 PoC。 状态和时间线将在协调或补丁发布后更新。 概述 在 register.php...

CVE-2025-62343 HCL IntelliOps Event Management is affected by multiple security vulnerabilities.

HCL IntelliOps Event Management IEM is affected by an Admin Session Concurrency Vulnerability. it may allows user sessions to remain active after logout or session deletion...

CVE-2025-62343

HCL IntelliOps Event Management (IEM) is affected by an Admin Session Concurrency Vulnerability that may allow user sessions to remain active after logout or session deletion. The assigned CVSS 3.1 score is 3.1 (LOW) , reflecting a network attack vector with high complexity and required user inte...

CVE-2025-62342

HCL IntelliOps Event Management (IEM) is affected by a Session Deletion Vulnerability where user sessions may not be fully terminated after logout or deletion, due to improper session handling. The vulnerability carries a CVSS 3.1 score of 6.4 (Medium) with high impacts to confidentiality and ava...

CVE-2025-62342 HCL IntelliOps Event Management is affected by multiple security vulnerabilities.

HCL IntelliOps Event Management IEM is affected by a Session Deletion Vulnerability. It may allow improper handling of user sessions, resulting in sessions not being fully terminated after logout or deletion...