Lucene search
+L

22 matches found

Kitploit
Kitploit
•added 2026/10/31 4:28 a.m.•24 views

Royal-Event-Management-System-todate-SQL-Injection-Authenticated

Royal Event Management System - 'todate' SQL Injection Authenticated 1. Description: Royal Event Management System 1.0 allows SQL Injection via parameter 'todate' in /royalevent/btndatesreport.php?= Exploiting this issue could allow an attacker to compromise the application, access or modify data...

6.5AI score
SaveExploits0
NVD
NVD
•added 2026/10/30 7:18 p.m.•9 views

CVE-2026-119526

Deserialization of Untrusted Data vulnerability in ThemeREX Royal Event allows Object Injection. This issue affects Royal Event: from n/a through 2.0...

9.8CVSS0.00408EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/30 6:30 p.m.•26 views

CVE-2026-119526

The WordPress Royal Event theme (versions up to and including 2.0 ) is vulnerable to a PHP Object Injection vulnerability. The root cause is the deserialization of untrusted data , which could allow an attacker to inject objects. This vulnerability has a CRITICAL base severity score of 9.8 , with...

9.8CVSS5.9AI score0.00408EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/30 6:30 p.m.•8 views

EUVD-2026-114283

Deserialization of Untrusted Data vulnerability in ThemeREX Royal Event allows Object Injection. This issue affects Royal Event: from n/a through 2.0...

9.8CVSS5.9AI score0.00408EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/30 6:30 p.m.•22 views

CVE-2026-119526 WordPress Royal Event theme <= 2.0 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in ThemeREX Royal Event allows Object Injection. This issue affects Royal Event: from n/a through 2.0...

9.8CVSS0.00408EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/10/30 9:35 a.m.•5 views

WordPress Royal Event theme <= 2.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Royal Event versions = 2.0...

9.8CVSS5.9AI score0.00408EPSS
SaveExploits0Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/30 12:00 a.m.•7 views

CVE-2026-119526: ThemeREX Royal Event: Deserialization of Untrusted Data vulnerability in ThemeREX Royal Event allows Object Injection

Deserialization of Untrusted Data vulnerability in ThemeREX Royal Event allows Object Injection. This issue affects Royal Event: from n/a through 2.0...

9.8CVSS5.9AI score0.00408EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/30 12:00 a.m.•8 views

PT-2026-133767

Name of the Vulnerable Software and Affected Versions ThemeREX Royal Event versions prior to 2.0 Description Deserialization of untrusted data allows for object injection. An attacker can inject malicious PHP objects, which may lead to remote code execution on the site. Recommendations At the...

9.8CVSS6.3AI score0.00408EPSS
SaveExploits0References3
KittySploit
KittySploit
•added 2026/07/28 11:27 a.m.•13 views

Royal Event Management System Admin Panel - Detect

Royal Event Management System admin panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Royal Event Management System admin panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Royal Event...

5.8AI score
SaveExploits0References1
KittySploit
KittySploit
•added 2026/07/28 11:27 a.m.•19 views

Royal Event Management System - Stored Cross-Site Scripting Detection

Royal Event Management System contains a stored cross-site scripting vulnerability. An attacker can execute arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other...

5.9AI score
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/05/23 1:04 a.m.•16 views

CVE-2022-28080

Royal Event Management System v1.0 was discovered to contain a SQL injection vulnerability via the todate parameter...

8.8CVSS7.9AI score0.56907EPSS
SaveExploits3References1
CNNVD
CNNVD
•added 2023/01/07 12:00 a.m.•20 views

Event Management and Event Management System authorization issue vulnerabilities

Event Management System is an event management system. A security vulnerability exists in the SourceCodester Royale Event Management System version 1.0, which stems from some unknown handling of the file /royalevent/userregister.php, the manipulation of which can lead to incorrect authentication...

9.8CVSS7.5AI score0.01041EPSS
SaveExploits0References3
Packet Storm
Packet Storm
•added 2022/05/12 12:00 a.m.•284 views

Royal Event Management System 1.0 SQL Injection

Exploit Title: Royal Event Management System 1.0 - 'todate' SQL Injection Authenticated Date: 2022-26-03 Exploit Author: Eren Gozaydin Vendor Homepage: https://www.sourcecodester.com/php/15238/event-management-system-project-php-source-code.html Software Link:...

8.8CVSS0.2AI score0.56907EPSS
SaveExploits3
Exploit DB
Exploit DB
•added 2022/05/12 12:00 a.m.•357 views

Royal Event Management System 1.0 - 'todate' SQL Injection (Authenticated)

Exploit Title: Royal Event Management System 1.0 - 'todate' SQL Injection Authenticated Date: 2022-26-03 Exploit Author: Eren Gozaydin Vendor Homepage: https://www.sourcecodester.com/php/15238/event-management-system-project-php-source-code.html Software Link:...

8.8CVSS7.9AI score0.56907EPSS
SaveExploits3
NVD
NVD
•added 2022/05/05 5:15 p.m.•46 views

CVE-2022-28080

Royal Event Management System v1.0 was discovered to contain a SQL injection vulnerability via the todate parameter...

8.8CVSS0.56907EPSS
SaveExploits3References4
attackerkb
attackerkb
•added 2022/05/05 5:15 p.m.•12 views

CVE-2022-28080

Royal Event Management System v1.0 was discovered to contain a SQL injection vulnerability via the todate parameter...

8.8CVSS6AI score0.56907EPSS
SaveExploits3References6
Prion
Prion
•added 2022/05/05 5:15 p.m.•29 views

Sql injection

Royal Event Management System v1.0 was discovered to contain a SQL injection vulnerability via the todate parameter...

6.5CVSS9AI score0.56907EPSS
SaveExploits3References4Affected Software1
CVE
CVE
•added 2022/05/05 4:06 p.m.•120 views

CVE-2022-28080

Product: Royal Event Management System v1.0 (SourceCodester PHP project). Vulnerability: SQL injection via the todate parameter in /royal_event/btndates_report.php (authenticated context per exploit details). Root cause: Lack of input validation/unsafe SQL construction allowing injection. Impact ...

8.8CVSS8.9AI score0.56907EPSS
SaveExploits3References4Affected Software1
Cvelist
Cvelist
•added 2022/05/05 4:06 p.m.•59 views

CVE-2022-28080

Royal Event Management System v1.0 was discovered to contain a SQL injection vulnerability via the todate parameter...

9.2AI score0.56907EPSS
SaveExploits3References4
Positive Technologies
Positive Technologies
•added 2022/05/05 12:00 a.m.•5 views

PT-2022-18799

Name of the Vulnerable Software and Affected Versions Royal Event Management System version 1.0 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the todate parameter. Recommendations For Royal Event Management System version 1.0, avoid usi...

8.8CVSS0.56907EPSS
SaveExploits3References8
Rows per page
Query Builder