Lucene search
+L

16 matches found

Cvelist
Cvelist
•added 2026/10/28 6:00 a.m.•23 views

CVE-2026-106003 Court Reservation < 1.12.4 - Unauthenticated Reservation Type Addition and Deletion

The Court Reservation WordPress plugin before 1.12.4 does not perform any authorization, authentication or nonce validation on one of its AJAX actions, allowing unauthenticated users to add or delete reservation types in the Court Reservation WordPress plugin before 1.12.4's configuration...

0.00268EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/28 6:00 a.m.•6 views

CVE-2026-106003

The Court Reservation WordPress plugin (versions before 1.12.4 ) is vulnerable to an access control flaw. The plugin fails to perform required authorization, authentication, or nonce validation on one of its AJAX actions. This allows unauthenticated users to add or delete reservation types within...

5.3CVSS5.9AI score0.00268EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/28 6:00 a.m.•5 views

EUVD-2026-111704

The Court Reservation WordPress plugin before 1.12.4 does not perform any authorization, authentication or nonce validation on one of its AJAX actions, allowing unauthenticated users to add or delete reservation types in the Court Reservation WordPress plugin before 1.12.4's configuration...

5.3CVSS5.9AI score0.00268EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/10/28 12:00 a.m.•6 views

PT-2026-127821

The Court Reservation WordPress plugin before 1.12.4 does not perform any authorization, authentication or nonce validation on one of its AJAX actions, allowing unauthenticated users to add or delete reservation types in the Court Reservation WordPress plugin before 1.12.4's configuration...

6AI score0.00268EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/05/23 12:01 a.m.•22 views

CVE-2022-43068

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deletereservation...

7.2CVSS7.1AI score0.00863EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/22 11:12 p.m.•15 views

CVE-2022-33057

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deletereservation...

7.2CVSS7.1AI score0.00956EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2022/11/02 8:15 p.m.•20 views

CVE-2022-43068

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deletereservation...

7.2CVSS5.8AI score0.00863EPSS
SaveExploits1References1
NVD
NVD
•added 2022/11/02 8:15 p.m.•35 views

CVE-2022-43068

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deletereservation...

7.2CVSS0.00863EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2022/11/02 12:00 a.m.•19 views

Online Diagnostic Lab Management System SQL Injection Vulnerability

Online Diagnostic Lab Management System is an online diagnostic lab management system. Online Diagnostic Lab Management System v1.0 has a SQL injection vulnerability, which can be exploited by an attacker to perform SQL injection via the id parameter of classes/Master.php?f=deletereservation...

7.2CVSS7.3AI score0.00863EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/11/02 12:00 a.m.•20 views

PT-2022-26737 · Unknown · Online Diagnostic Lab Management System

Name of the Vulnerable Software and Affected Versions: Online Diagnostic Lab Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/classes/Master.php?f=delete reservation" endpoint...

7.2CVSS7AI score0.00863EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2022/11/02 12:00 a.m.•42 views

CVE-2022-43068

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deletereservation...

7.5AI score0.00863EPSS
SaveExploits1References1
NVD
NVD
•added 2022/06/29 7:15 p.m.•28 views

CVE-2022-33057

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deletereservation...

7.2CVSS0.00956EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2022/06/29 7:15 p.m.•24 views

CVE-2022-33057

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deletereservation...

7.2CVSS7.1AI score0.00956EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2022/06/29 5:05 p.m.•39 views

CVE-2022-33057

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deletereservation...

7.5AI score0.00956EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2022/06/29 12:00 a.m.•7 views

PT-2022-21670

Name of the Vulnerable Software and Affected Versions Online Railway Reservation System version 1.0 Description A SQL injection issue was found in the Online Railway Reservation System. The vulnerability can be exploited via the id parameter at the "/classes/Master.php?f=delete reservation"...

7.2CVSS0.00956EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2022/06/29 12:00 a.m.•16 views

Online Railway Reservation System SQL Injection Vulnerability

Sourcecodester Online Railway Reservation system is a web-based application that provides an online platform for rail or train station passengers or potential passengers to browse their schedules and reserve seats. sourceCodester Online Railway Reservation System v1.0 is vulnerable to a SQL...

7.2CVSS5.8AI score0.00956EPSS
SaveExploits1References2
Rows per page
Query Builder