Lucene search
K

6 matches found

CNNVD
CNNVD
added 2026/01/26 12:0 a.m.2 views

Books_Manager code issue vulnerabilities

BooksManager is a book management system developed by iJason-Liu. There are code issues and vulnerabilities in BooksManager, which stem from incorrect handling of the parameter “bookcover” in the file controllers/bookscenter/uploadbookCover.php. This could lead to arbitrary file uploads...

5.8CVSS6AI score0.00064EPSS
Exploits0References4
OSV
OSV
added 2025/07/13 11:15 p.m.0 views

CVE-2025-7547

A vulnerability, which was classified as critical, was found in Campcodes Online Movie Theater Seat Reservation System 1.0. This affects the function savemovie of the file /admin/adminclass.php. The manipulation of the argument cover leads to unrestricted upload. It is possible to initiate the...

9.8CVSS5.5AI score0.0038EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/07/13 12:0 a.m.2 views

CampCodes Online Movie Theater Seat Reservation 代码问题漏洞

CampCodes Online Movie Theater Seat Reservation is an online theater seat reservation system from CampCodes Philippines. A code issue vulnerability exists in CampCodes Online Movie Theater Seat Reservation version 1.0, which stems from an unrestricted upload due to incorrect manipulation of the...

9.8CVSS7.6AI score0.0038EPSS
Exploits1References6
OSV
OSV
added 2022/02/26 12:15 a.m.1 views

CVE-2022-25094

Home Owners Collection Management System v1.0 was discovered to contain a remote code execution RCE vulnerability via the parameter "cover" in SystemSettings.php...

8.8CVSS6.4AI score0.03363EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2022/02/26 12:15 a.m.4 views

CVE-2022-25094

Home Owners Collection Management System v1.0 was discovered to contain a remote code execution RCE vulnerability via the parameter "cover" in SystemSettings.php...

8.8CVSS7.9AI score0.03363EPSS
Exploits1References2
OSV
OSV
added 2022/01/18 5:15 p.m.3 views

CVE-2022-0233

The ProfileGrid – User Profiles, Memberships, Groups and Communities WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping via the pmuseravatar and pmcoverimage parameters found in the /admin/class-profile-magic-admin.php file which allows attackers with...

5.4CVSS6.1AI score0.00296EPSS
Exploits1References3
Rows per page
Query Builder