EUVD-2026-25861

A vulnerability was determined in code-projects Online Lot Reservation System 1.0. This impacts an unknown function of the file /activity.php. This manipulation of the argument directory causes unrestricted upload. The attack can be initiated remotely. The exploit has been publicly disclosed and...

CVE-2026-7133 code-projects Online Lot Reservation System activity.php unrestricted upload

A vulnerability was determined in code-projects Online Lot Reservation System 1.0. This impacts an unknown function of the file /activity.php. This manipulation of the argument directory causes unrestricted upload. The attack can be initiated remotely. The exploit has been publicly disclosed and...

CVE-2026-7133

The CVE-2026-7133 entry affects code-projects Online Lot Reservation System 1.0, specifically a vulnerability in /activity.php where manipulating the directory argument enables unrestricted upload. This can be triggered remotely and has publicly disclosed exploit details. The connected documents ...

CVE-2026-7133: Unrestricted Upload of File with Dangerous Type

A vulnerability was determined in code-projects Online Lot Reservation System 1.0. This impacts an unknown function of the file /activity.php. This manipulation of the argument directory causes unrestricted upload. The attack can be initiated remotely. The exploit has been publicly disclosed and...

CVE-2026-1135: Improper Neutralization of Input During Web Page Generation

A security flaw has been discovered in itsourcecode Society Management System 1.0. This impacts an unknown function of the file /admin/activity.php. The manipulation of the argument Title results in cross site scripting. The attack may be launched remotely. The exploit has been released to the...

CVE-2016-10754

modules/Calendar/Activity.php in Vtiger CRM 6.5.0 allows SQL injection via the contactidlist parameter...

CVE-2024-38293

ALCASAR before 3.6.1 allows CSRF and remote code execution in activity.php...

CVE-2024-38293

ALCASAR before 3.6.1 allows CSRF and remote code execution in activity.php...

CVE-2024-38293

ALCASAR before 3.6.1 allows CSRF and remote code execution in activity.php...

CVE-2024-38293: Cross-Site Request Forgery (CSRF)

ALCASAR before 3.6.1 allows CSRF and remote code execution in activity.php...

CVE-2024-38293

Versions of ALCASAR prior to 3.6.1 are vulnerable to Cross-Site Request Forgery (CSRF) and remote code execution (RCE) . The flaw specifically exists within the activity.php file. To resolve this issue, users are recommended to update to ALCASAR version 3.6.1 or later. No information regarding sp...

CVE-2024-38293

ALCASAR before 3.6.1 allows CSRF and remote code execution in activity.php...

CVE-2022-34120

Barangay Management System v1.0 was discovered to contain a remote code execution RCE vulnerability via the module editing function at /pages/activity/activity.php...

CVE-2022-34120

CVE-2022-34120 affects Barangay Management System v1.0. A remote code execution exists via the module editing function at /pages/activity/activity.php, with several sources describing an arbitrary file upload path in the Activity module that enables code execution. The NVD entry lists CVSS3.1: AV...

CVE-2022-34120: Unrestricted Upload of File with Dangerous Type

Barangay Management System v1.0 was discovered to contain a remote code execution RCE vulnerability via the module editing function at /pages/activity/activity.php...

CVE-2016-10754: Improper Neutralization of Special Elements used in an SQL Command

modules/Calendar/Activity.php in Vtiger CRM 6.5.0 allows SQL injection via the contactidlist parameter...