Lucene search
+L

8 matches found

Kitploit
Kitploit
•added 2026/10/01 5:18 p.m.•12 views

CVE-2026-7089-XSS

home-service-system-unauth-stored-xss-admin-takeover Сведения об уязвимости Поле| Детали ---|--- Поставщик| code-projects.org Продукт| Home Service System In PHP Версия| 1.0 Тип уязвимости| Межсайтовый скриптинг с сохранением Stored XSS CWE| CWE-79 Требуется аутентификация| Нет Автор| Imad Alvi...

5.3CVSS6AI score0.00449EPSS
SaveExploits0
NVD
NVD
•added 2026/04/27 6:16 a.m.•27 views

CVE-2026-7089

A security vulnerability has been detected in code-projects Home Service System 1.0. The impacted element is an unknown function of the file /booking.php of the component Appointment Booking. The manipulation of the argument fname/lname leads to cross site scripting. The attack may be initiated...

5.3CVSS0.00449EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/04/27 5:00 a.m.•14 views

EUVD-2026-25773

A security vulnerability has been detected in code-projects Home Service System 1.0. The impacted element is an unknown function of the file /booking.php of the component Appointment Booking. The manipulation of the argument fname/lname leads to cross site scripting. The attack may be initiated...

5.3CVSS3.8AI score0.00449EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/04/27 5:00 a.m.•60 views

CVE-2026-7089 code-projects Home Service System Appointment Booking booking.php cross site scripting

A security vulnerability has been detected in code-projects Home Service System 1.0. The impacted element is an unknown function of the file /booking.php of the component Appointment Booking. The manipulation of the argument fname/lname leads to cross site scripting. The attack may be initiated...

5.3CVSS0.00449EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2026/04/27 5:00 a.m.•10 views

CVE-2026-7089

A security vulnerability has been detected in code-projects Home Service System 1.0. The impacted element is an unknown function of the file /booking.php of the component Appointment Booking. The manipulation of the argument fname/lname leads to cross site scripting. The attack may be initiated...

5.3CVSS3.8AI score0.00449EPSS
SaveExploits0References5Affected Software1
CVE
CVE
•added 2026/04/27 5:00 a.m.•77 views

CVE-2026-7089

CVE-2026-7089 affects code-projects Home Service System 1.0. The vulnerability targets the Appointment Booking component, specifically the /booking.php file, where manipulation of the fname/lname parameters enables cross-site scripting. The description notes remote initiation and publicly disclos...

5.3CVSS3.6AI score0.00449EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/27 12:00 a.m.•2 views

CVE-2026-7089: Improper Neutralization of Input During Web Page Generation

A security vulnerability has been detected in code-projects Home Service System 1.0. The impacted element is an unknown function of the file /booking.php of the component Appointment Booking. The manipulation of the argument fname/lname leads to cross site scripting. The attack may be initiated...

5.3CVSS3.6AI score0.00449EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/04/27 12:00 a.m.•42 views

PT-2026-35355

A security vulnerability has been detected in code-projects Home Service System 1.0. The impacted element is an unknown function of the file /booking.php of the component Appointment Booking. The manipulation of the argument fname/lname leads to cross site scripting. The attack may be initiated...

5.3CVSS3.5AI score0.00449EPSS
SaveExploits0References5
Rows per page
Query Builder