Lucene search
+L

4254 matches found

Vulnrichment
Vulnrichment
•added 2024/11/01 2:18 p.m.•18 views

CVE-2024-38737 WordPress ReDi Restaurant Reservation plugin <= 24.0422 - Broken Access Control vulnerability

Missing Authorization vulnerability in Reservation Diary ReDi Restaurant Reservation allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects ReDi Restaurant Reservation: from n/a through 24.0422...

5.4CVSS6.9AI score0.00305EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/11/01 2:18 p.m.•25 views

CVE-2024-38737 WordPress ReDi Restaurant Reservation plugin <= 24.0422 - Broken Access Control vulnerability

Missing Authorization vulnerability in Reservation Diary ReDi Restaurant Reservation allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects ReDi Restaurant Reservation: from n/a through 24.0422...

5.4CVSS0.00305EPSS
SaveExploits0References1
CVE
CVE
•added 2024/11/01 2:18 p.m.•54 views

CVE-2024-38737

Technical details about CVE-2024-38737 are not present in the provided connected documents. Public information in these sources does not specify affected versions, root cause, impact, or remediation. Monitor for updates from official advisories and CVE records.

5.4CVSS5.5AI score0.00305EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/11/01 12:00 a.m.•17 views

WordPress plugin ReDi Restaurant Reservation has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.4CVSS6.7AI score0.00305EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/01 12:00 a.m.•8 views

CVE-2024-38737: Missing Authorization

Missing Authorization vulnerability in Reservation Diary ReDi Restaurant Reservation allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects ReDi Restaurant Reservation: from n/a through 24.0422...

5.4CVSS5.8AI score0.00305EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/11/01 12:00 a.m.•16 views

PT-2024-28181 · Unknown · Redi Restaurant Reservation

Name of the Vulnerable Software and Affected Versions: ReDi Restaurant Reservation versions through 24.0422 Description: The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by ACLs. Recommendations: For versions through...

5.4CVSS6.5AI score0.00305EPSS
SaveExploits0References3
NVD
NVD
•added 2024/10/27 10:15 a.m.•33 views

CVE-2024-10413

A vulnerability, which was classified as critical, has been found in SourceCodester Online Hotel Reservation System 1.0. Affected by this issue is the function upload of the file /guest/update.php. The manipulation of the argument image leads to unrestricted upload. The attack may be launched...

9.8CVSS0.00534EPSS
SaveExploits0References5
osv_cve
osv_cve
•added 2024/10/27 10:15 a.m.•19 views

CVE-2024-10413

A vulnerability, which was classified as critical, has been found in SourceCodester Online Hotel Reservation System 1.0. Affected by this issue is the function upload of the file /guest/update.php. The manipulation of the argument image leads to unrestricted upload. The attack may be launched...

9.8CVSS5.5AI score0.00534EPSS
SaveExploits0References5
CVE
CVE
•added 2024/10/27 9:31 a.m.•68 views

CVE-2024-10413

CVE-2024-10413 affects SourceCodester Online Hotel Reservation System v1.0, specifically the upload function in /guest/update.php where manipulating the image parameter leads to unrestricted file uploads. The issue can be exploited remotely and exploits have been disclosed publicly. Connected sou...

9.8CVSS6.7AI score0.00534EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
•added 2024/10/27 9:31 a.m.•55 views

CVE-2024-10413 SourceCodester Online Hotel Reservation System update.php upload unrestricted upload

A vulnerability, which was classified as critical, has been found in SourceCodester Online Hotel Reservation System 1.0. Affected by this issue is the function upload of the file /guest/update.php. The manipulation of the argument image leads to unrestricted upload. The attack may be launched...

6.5CVSS0.00534EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2024/10/27 9:31 a.m.•16 views

CVE-2024-10413 SourceCodester Online Hotel Reservation System update.php upload unrestricted upload

A vulnerability, which was classified as critical, has been found in SourceCodester Online Hotel Reservation System 1.0. Affected by this issue is the function upload of the file /guest/update.php. The manipulation of the argument image leads to unrestricted upload. The attack may be launched...

6.5CVSS6.9AI score0.00534EPSS
SaveExploits0References5
NVD
NVD
•added 2024/10/27 5:15 a.m.•38 views

CVE-2024-10411

A vulnerability was found in SourceCodester Online Hotel Reservation System 1.0. It has been classified as critical. Affected is the function doCancelRoom/doCancel/doConfirm/doCancel/doCheckin/doCheckout of the file /marimar/admin/modroom/controller.php. The manipulation of the argument id leads ...

7.2CVSS0.00441EPSS
SaveExploits0References5
osv_cve
osv_cve
•added 2024/10/27 5:15 a.m.•28 views

CVE-2024-10411

A vulnerability was found in SourceCodester Online Hotel Reservation System 1.0. It has been classified as critical. Affected is the function doCancelRoom/doCancel/doConfirm/doCancel/doCheckin/doCheckout of the file /marimar/admin/modroom/controller.php. The manipulation of the argument id leads ...

7.2CVSS5.8AI score0.00441EPSS
SaveExploits0References5
CVE
CVE
•added 2024/10/27 5:00 a.m.•77 views

CVE-2024-10411

CVE-2024-10411 affects SourceCodester Online Hotel Reservation System 1.0. The vulnerability resides in the admin side, in functions doCancelRoom/doCancel/doConfirm/doCancel/doCheckin/doCheckout of /marimar/admin/mod_room/controller.php, where the id parameter is used in SQL queries, enabling a r...

7.2CVSS6.9AI score0.00441EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
•added 2024/10/27 5:00 a.m.•47 views

CVE-2024-10411 SourceCodester Online Hotel Reservation System controller.php doCheckout sql injection

A vulnerability was found in SourceCodester Online Hotel Reservation System 1.0. It has been classified as critical. Affected is the function doCancelRoom/doCancel/doConfirm/doCancel/doCheckin/doCheckout of the file /marimar/admin/modroom/controller.php. The manipulation of the argument id leads ...

6.5CVSS0.00441EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2024/10/27 5:00 a.m.•18 views

CVE-2024-10411 SourceCodester Online Hotel Reservation System controller.php doCheckout sql injection

A vulnerability was found in SourceCodester Online Hotel Reservation System 1.0. It has been classified as critical. Affected is the function doCancelRoom/doCancel/doConfirm/doCancel/doCheckin/doCheckout of the file /marimar/admin/modroom/controller.php. The manipulation of the argument id leads ...

6.5CVSS7.4AI score0.00441EPSS
SaveExploits0References5
NVD
NVD
•added 2024/10/27 4:15 a.m.•34 views

CVE-2024-10410

A vulnerability classified as critical was found in SourceCodester Online Hotel Reservation System 1.0. Affected by this vulnerability is the function upload of the file /admin/modroom/controller.php?action=add. The manipulation of the argument image leads to unrestricted upload. The attack can b...

7.2CVSS0.01151EPSS
SaveExploits1References5
osv_cve
osv_cve
•added 2024/10/27 4:15 a.m.•22 views

CVE-2024-10410

A vulnerability classified as critical was found in SourceCodester Online Hotel Reservation System 1.0. Affected by this vulnerability is the function upload of the file /admin/modroom/controller.php?action=add. The manipulation of the argument image leads to unrestricted upload. The attack can b...

7.2CVSS5.5AI score0.01151EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2024/10/27 3:31 a.m.•19 views

CVE-2024-10410 SourceCodester Online Hotel Reservation System controller.php upload unrestricted upload

A vulnerability classified as critical was found in SourceCodester Online Hotel Reservation System 1.0. Affected by this vulnerability is the function upload of the file /admin/modroom/controller.php?action=add. The manipulation of the argument image leads to unrestricted upload. The attack can b...

6.5CVSS7AI score0.01151EPSS
SaveExploits1References5
CVE
CVE
•added 2024/10/27 3:31 a.m.•117 views

CVE-2024-10410

CVE-2024-10410 affects SourceCodester Online Hotel Reservation System 1.0. The vulnerability resides in the upload function at /admin/mod_room/controller.php?action=add, where manipulating the image argument leads to unrestricted file upload, enabling a remote attack. The exploit has been disclos...

7.2CVSS6.6AI score0.01151EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder