Lucene search
+L

267 matches found

RedhatCVE
RedhatCVE
added 2025/02/05 4:55 a.m.10 views

CVE-2024-10159

A vulnerability classified as critical was found in PHPGurukul Boat Booking System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/profile.php of the component My Profile Page. The manipulation of the argument sadminusername/fullname/emailid/mobilenumber leads t...

7.5CVSS7.5AI score0.00622EPSS
SaveExploits1References1
CNVD
CNVD
added 2024/12/24 12:0 a.m.18 views

Unauthorized Access Vulnerability in StarRocks Database System of Beijing Mirror Boat Technology Co.

StarRocks database system is a new generation of open source extremely fast full-scene MPP Massively Parallel Processing database . There is an unauthorized access vulnerability in the StarRocks database system of Beijing Mirror Boat Technology Co. Ltd, which can be exploited by attackers to obta...

6.8AI score
SaveExploits0
CNVD
CNVD
added 2024/12/06 12:0 a.m.26 views

XSS Vulnerability in StarRocks Database System of Beijing Mirror Boat Technology Co.

StarRocks database system is a new generation of open source extremely fast full-scene MPP database system . Beijing Mirror Boat Technology Co. StarRocks database system has an XSS vulnerability that can be exploited by attackers to obtain sensitive information such as user cookies...

5.8AI score
SaveExploits0
CNVD
CNVD
added 2024/12/06 12:0 a.m.7 views

XSS Vulnerability in StarRocks Database System of Beijing Mirror Boat Technology Co.

StarRocks database system is a new generation of open source extremely fast full-scene MPP database system . Beijing Mirror Boat Technology Co., Ltd StarRocks database system has an XSS vulnerability that can be exploited by attackers to obtain sensitive information such as user cookies...

5.8AI score
SaveExploits0
OSV
OSV
added 2024/11/20 3:15 p.m.5 views

CVE-2024-51208

File Upload vulnerability in change-image.php in Anuj Kumar's Boat Booking System version 1.0 allows local attackers to upload a malicious PHP script via the Image Upload Mechanism parameter...

7.2CVSS5.8AI score0.00414EPSS
SaveExploits0References2
NVD
NVD
added 2024/11/20 3:15 p.m.30 views

CVE-2024-51208

File Upload vulnerability in change-image.php in Anuj Kumar's Boat Booking System version 1.0 allows local attackers to upload a malicious PHP script via the Image Upload Mechanism parameter...

7.2CVSS0.00414EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/11/20 12:0 a.m.16 views

CVE-2024-51208

File Upload vulnerability in change-image.php in Anuj Kumar's Boat Booking System version 1.0 allows local attackers to upload a malicious PHP script via the Image Upload Mechanism parameter...

7AI score0.00414EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/11/20 12:0 a.m.7 views

PHPGurukul Boat Booking System 安全漏洞

PHPGurukul Boat Booking System is a boat booking system from PHPGurukul. A security vulnerability exists in version 1.0 of the PHPGurukul Boat Booking System, which stems from an Image Upload Mechanism parameter in change-image.php that allows a local attacker to upload malicious PHP scripts...

7.2CVSS6.6AI score0.00414EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/11/20 12:0 a.m.31 views

CVE-2024-51208

File Upload vulnerability in change-image.php in Anuj Kumar's Boat Booking System version 1.0 allows local attackers to upload a malicious PHP script via the Image Upload Mechanism parameter...

0.00414EPSS
SaveExploits0References2
CVE
CVE
added 2024/11/20 12:0 a.m.68 views

CVE-2024-51208

The CVE concerns Anuj Kumar's Boat Booking System v1.0 where the vulnerable component is change-image.php’s Image Upload Mechanism parameter. The issue is a File Upload vulnerability that lets local attackers upload a malicious PHP script, enabling potential code execution on the system. Exploita...

7.2CVSS6.8AI score0.00414EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2024/11/20 12:0 a.m.8 views

PT-2024-34560 · Unknown · Anuj Kumar'S Boat Booking System

Name of the Vulnerable Software and Affected Versions: Anuj Kumar's Boat Booking System version 1.0 Description: The issue allows local attackers to upload a malicious PHP script via the Image Upload Mechanism parameter in the change-image.php file. This enables attackers to potentially execute...

7.2CVSS7.2AI score0.00414EPSS
SaveExploits0References6
CVE
CVE
added 2024/11/14 6:8 p.m.72 views

CVE-2024-52376

CVE-2024-52376 is an Unrestricted/Arbitrary File Upload vulnerability in the WordPress plugin “Boat Rental Plugin for WordPress” (cmsMinds), affecting versions up to 1.0.1. The issue allows uploading a web shell to the web server, representing a critical risk (CVSS v3.1 base score 10.0; NETWORK, ...

10CVSS7.2AI score0.00496EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/11/14 6:8 p.m.13 views

CVE-2024-52376 WordPress Boat Rental Plugin for WordPress plugin <= 1.0.1 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in cmsMinds Boat Rental Plugin for WordPress allows Upload a Web Shell to a Web Server.This issue affects Boat Rental Plugin for WordPress: from n/a through 1.0.1...

10CVSS7.1AI score0.00496EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/11/14 6:8 p.m.55 views

CVE-2024-52376 WordPress Boat Rental Plugin for WordPress plugin <= 1.0.1 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in cmsMinds Boat Rental Plugin for WordPress boat-rental-system allows Upload a Web Shell to a Web Server.This issue affects Boat Rental Plugin for WordPress: from n/a through = 1.0.1...

10CVSS0.00496EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/11/14 12:0 a.m.6 views

WordPress plugin Boat Rental 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

10CVSS8.3AI score0.00496EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2024/11/11 7:10 a.m.7 views

WordPress Boat Rental Plugin for WordPress plugin <= 1.0.1 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Plugin Boat Rental Plugin for WordPress versions = 1.0.1...

10CVSS7AI score0.00496EPSS
SaveExploits0Affected Software1
OSV
OSV
added 2024/10/20 6:15 a.m.2 views

CVE-2024-10191

A vulnerability, which was classified as problematic, was found in PHPGurukul Boat Booking System 1.0. This affects an unknown part of the file /admin/book-details.php of the component Booking Details Page. The manipulation of the argument Official Remark leads to cross site scripting. It is...

4.8CVSS3.9AI score0.00386EPSS
SaveExploits1References5
NVD
NVD
added 2024/10/20 6:15 a.m.13 views

CVE-2024-10191

A vulnerability, which was classified as problematic, was found in PHPGurukul Boat Booking System 1.0. This affects an unknown part of the file /admin/book-details.php of the component Booking Details Page. The manipulation of the argument Official Remark leads to cross site scripting. It is...

5.3CVSS0.00386EPSS
SaveExploits1References5
CVE
CVE
added 2024/10/20 5:31 a.m.51 views

CVE-2024-10191

CVE-2024-10191 affects PHPGurukul Boat Booking System 1.0. The vulnerability is a cross-site scripting flaw in the /admin/book-details.php page, triggered by manipulating the Official Remark parameter. Remote exploitation is possible, and multiple sources confirm the public disclosure of the expl...

5.3CVSS3.9AI score0.00386EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2024/10/20 5:31 a.m.26 views

CVE-2024-10191 PHPGurukul Boat Booking System Booking Details Page book-details.php cross site scripting

A vulnerability, which was classified as problematic, was found in PHPGurukul Boat Booking System 1.0. This affects an unknown part of the file /admin/book-details.php of the component Booking Details Page. The manipulation of the argument Official Remark leads to cross site scripting. It is...

5.3CVSS0.00386EPSS
SaveExploits1References5
Rows per page
Query Builder