Lucene search
+L

7 matches found

RedhatCVE
RedhatCVE
•added 2025/05/22 5:07 a.m.•19 views

CVE-2012-5384

Multiple cross-site scripting XSS vulnerabilities in Craig Knudsen WebCalendar allow remote attackers to inject arbitrary web script or HTML via the 1 $name or 2 $description variables in editentryhandler.php, or 3 $url, 4 $tempfullname, or 5 $extusers variables in viewentry.php, different vector...

4.3CVSS5.8AI score0.01693EPSS
SaveExploits1References1
NVD
NVD
•added 2024/10/28 8:15 p.m.•38 views

CVE-2024-48465

The MRBS version 1.5.0 has an SQL injection vulnerability in the editentryhandler.php file, specifically in the rooms%5B%5D parameter...

9.8CVSS0.00466EPSS
SaveExploits0References2
CVE
CVE
•added 2024/10/28 12:00 a.m.•82 views

CVE-2024-48465

The MRBS online meeting room management system version 1.5.0 is vulnerable to an SQL injection vulnerability. The flaw exists within the edit_entry_handler.php file, specifically triggered via the rooms%5B%5D parameter. This vulnerability allows for the improper neutralization of special elements...

9.8CVSS8.3AI score0.00466EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/10/28 12:00 a.m.•18 views

CVE-2024-48465

The MRBS version 1.5.0 has an SQL injection vulnerability in the editentryhandler.php file, specifically in the rooms%5B%5D parameter...

8AI score0.00466EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/28 12:00 a.m.•5 views

CVE-2024-48465: Improper Neutralization of Special Elements used in an SQL Command

The MRBS version 1.5.0 has an SQL injection vulnerability in the editentryhandler.php file, specifically in the rooms%5B%5D parameter...

9.8CVSS5.8AI score0.00466EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/10/28 12:00 a.m.•38 views

CVE-2024-48465

The MRBS version 1.5.0 has an SQL injection vulnerability in the editentryhandler.php file, specifically in the rooms%5B%5D parameter...

0.00466EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/10/11 12:00 a.m.•7 views

CVE-2012-5384: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Craig Knudsen WebCalendar allow remote attackers to inject arbitrary web script or HTML via the 1 $name or 2 $description variables in editentryhandler.php, or 3 $url, 4 $tempfullname, or 5 $extusers variables in viewentry.php, different vector...

4.3CVSS5.9AI score0.00931EPSS
SaveExploits0References2
Rows per page
Query Builder