Fedora Update for mrbs FEDORA-2017-69cc374b0d

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 26 Update: mrbs-1.7.0-1.fc26

The Meeting Room Booking System MRBS is a PHP-based application for booking meeting rooms...

[SECURITY] Fedora 25 Update: mrbs-1.7.0-1.fc25

The Meeting Room Booking System MRBS is a PHP-based application for booking meeting rooms...

Fedora Update for mrbs FEDORA-2017-b5bcfedf10

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2013-7407

Cross-site request forgery CSRF vulnerability in the MRBS module for Drupal allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the MRBS module for Drupal allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2013-7407

Technical details are not publicly available in the provided documents. The description notes a CSRF vulnerability in Drupal's MRBS module, but there are no concrete affected versions, root cause, fixes, or exploitation details in the supplied materials. Monitor for updates.

CVE-2013-7407: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the MRBS module for Drupal allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

PT-2014-3422

Name of the Vulnerable Software and Affected Versions Drupal MRBS module affected versions not specified Description A cross-site request forgery CSRF issue in the MRBS module for Drupal allows remote attackers to hijack the authentication of victims. The exact vectors used for the attack are not...

CVE-2013-7406

SQL injection vulnerability in the MRBS module for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the MRBS module for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2013-7406

SQL injection vulnerability in the MRBS module for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2013-7406

CVE-2013-7406 describes an SQL injection vulnerability in the MRBS module for Drupal. The issue allows remote attackers to execute arbitrary SQL commands via unspecified vectors, affecting the MRBS Drupal component. The root cause is an injection flaw in how user-supplied input is handled in the ...

PT-2014-3421

Name of the Vulnerable Software and Affected Versions Drupal affected versions not specified Description A SQL injection issue in the MRBS module for Drupal allows remote attackers to execute arbitrary SQL commands. Recommendations At the moment, there is no information about a newer version that...

CVE-2013-7406: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the MRBS module for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Meeting Room Booking System (MRBS) 1.2.6 month.php area Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/30531/info MRBS Meeting Room Booking Software is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary...

Meeting Room Booking System (MRBS) 1.2.6 search.php area Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/30531/info MRBS Meeting Room Booking Software is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary...

Meeting Room Booking System (MRBS) < 1.4 - SQL Injection Exploit

No description provided by source. MRBS is a system for multi-site booking of meeting rooms. Rooms are grouped by building/area and shown in a side-by-side view. Although the goal was initially to book rooms, MRBS can also be used to book any resource computer, planes, whatever you want. Web CMS:...

MRBS 1.2.x 'view_entry.php' SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/26977/info MRBS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Meeting Room Booking System (MRBS) 1.2.6 help.php area Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/30531/info MRBS Meeting Room Booking Software is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary...