7 matches found
CVE-2012-5384
Multiple cross-site scripting XSS vulnerabilities in Craig Knudsen WebCalendar allow remote attackers to inject arbitrary web script or HTML via the 1 $name or 2 $description variables in editentryhandler.php, or 3 $url, 4 $tempfullname, or 5 $extusers variables in viewentry.php, different vector...
CVE-2024-48465
The MRBS version 1.5.0 has an SQL injection vulnerability in the editentryhandler.php file, specifically in the rooms%5B%5D parameter...
CVE-2024-48465
The MRBS online meeting room management system version 1.5.0 is vulnerable to an SQL injection vulnerability. The flaw exists within the edit_entry_handler.php file, specifically triggered via the rooms%5B%5D parameter. This vulnerability allows for the improper neutralization of special elements...
CVE-2024-48465
The MRBS version 1.5.0 has an SQL injection vulnerability in the editentryhandler.php file, specifically in the rooms%5B%5D parameter...
CVE-2024-48465: Improper Neutralization of Special Elements used in an SQL Command
The MRBS version 1.5.0 has an SQL injection vulnerability in the editentryhandler.php file, specifically in the rooms%5B%5D parameter...
CVE-2024-48465
The MRBS version 1.5.0 has an SQL injection vulnerability in the editentryhandler.php file, specifically in the rooms%5B%5D parameter...
CVE-2012-5384: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Craig Knudsen WebCalendar allow remote attackers to inject arbitrary web script or HTML via the 1 $name or 2 $description variables in editentryhandler.php, or 3 $url, 4 $tempfullname, or 5 $extusers variables in viewentry.php, different vector...