22 matches found
Royal-Event-Management-System-todate-SQL-Injection-Authenticated
Royal Event Management System - 'todate' SQL Injection Authenticated 1. Description: Royal Event Management System 1.0 allows SQL Injection via parameter 'todate' in /royalevent/btndatesreport.php?= Exploiting this issue could allow an attacker to compromise the application, access or modify data...
CVE-2026-119526
Deserialization of Untrusted Data vulnerability in ThemeREX Royal Event allows Object Injection. This issue affects Royal Event: from n/a through 2.0...
CVE-2026-119526
The WordPress Royal Event theme (versions up to and including 2.0 ) is vulnerable to a PHP Object Injection vulnerability. The root cause is the deserialization of untrusted data , which could allow an attacker to inject objects. This vulnerability has a CRITICAL base severity score of 9.8 , with...
EUVD-2026-114283
Deserialization of Untrusted Data vulnerability in ThemeREX Royal Event allows Object Injection. This issue affects Royal Event: from n/a through 2.0...
CVE-2026-119526 WordPress Royal Event theme <= 2.0 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in ThemeREX Royal Event allows Object Injection. This issue affects Royal Event: from n/a through 2.0...
WordPress Royal Event theme <= 2.0 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Royal Event versions = 2.0...
CVE-2026-119526: ThemeREX Royal Event: Deserialization of Untrusted Data vulnerability in ThemeREX Royal Event allows Object Injection
Deserialization of Untrusted Data vulnerability in ThemeREX Royal Event allows Object Injection. This issue affects Royal Event: from n/a through 2.0...
PT-2026-133767
Name of the Vulnerable Software and Affected Versions ThemeREX Royal Event versions prior to 2.0 Description Deserialization of untrusted data allows for object injection. An attacker can inject malicious PHP objects, which may lead to remote code execution on the site. Recommendations At the...
Royal Event Management System Admin Panel - Detect
Royal Event Management System admin panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Royal Event Management System admin panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Royal Event...
Royal Event Management System - Stored Cross-Site Scripting Detection
Royal Event Management System contains a stored cross-site scripting vulnerability. An attacker can execute arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other...
CVE-2022-28080
Royal Event Management System v1.0 was discovered to contain a SQL injection vulnerability via the todate parameter...
Event Management and Event Management System authorization issue vulnerabilities
Event Management System is an event management system. A security vulnerability exists in the SourceCodester Royale Event Management System version 1.0, which stems from some unknown handling of the file /royalevent/userregister.php, the manipulation of which can lead to incorrect authentication...
Royal Event Management System 1.0 SQL Injection
Exploit Title: Royal Event Management System 1.0 - 'todate' SQL Injection Authenticated Date: 2022-26-03 Exploit Author: Eren Gozaydin Vendor Homepage: https://www.sourcecodester.com/php/15238/event-management-system-project-php-source-code.html Software Link:...
Royal Event Management System 1.0 - 'todate' SQL Injection (Authenticated)
Exploit Title: Royal Event Management System 1.0 - 'todate' SQL Injection Authenticated Date: 2022-26-03 Exploit Author: Eren Gozaydin Vendor Homepage: https://www.sourcecodester.com/php/15238/event-management-system-project-php-source-code.html Software Link:...
CVE-2022-28080
Royal Event Management System v1.0 was discovered to contain a SQL injection vulnerability via the todate parameter...
CVE-2022-28080
Royal Event Management System v1.0 was discovered to contain a SQL injection vulnerability via the todate parameter...
Sql injection
Royal Event Management System v1.0 was discovered to contain a SQL injection vulnerability via the todate parameter...
CVE-2022-28080
Product: Royal Event Management System v1.0 (SourceCodester PHP project). Vulnerability: SQL injection via the todate parameter in /royal_event/btndates_report.php (authenticated context per exploit details). Root cause: Lack of input validation/unsafe SQL construction allowing injection. Impact ...
CVE-2022-28080
Royal Event Management System v1.0 was discovered to contain a SQL injection vulnerability via the todate parameter...
PT-2022-18799
Name of the Vulnerable Software and Affected Versions Royal Event Management System version 1.0 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the todate parameter. Recommendations For Royal Event Management System version 1.0, avoid usi...