Lucene search
K

7 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.20 views

EUVD-2023-56052

Malicious code in bioql PyPI...

6.5CVSS6.5AI score0.00134EPSS
Exploits2References3
RedhatCVE
RedhatCVE
added 2025/05/23 4:23 a.m.4 views

CVE-2023-48830

Shuttle Booking Software 2.0 is vulnerable to CSV Injection in the Languages section via an export...

8.8CVSS7.2AI score0.00228EPSS
Exploits2
NVD
NVD
added 2025/02/20 7:15 p.m.10 views

CVE-2023-51336

PHPJabbers Meeting Room Booking System v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV...

8.8CVSS0.00136EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2025/02/20 12:0 a.m.2 views

PT-2025-7302 · Phpjabbers · Phpjabbers Bus Reservation System

Name of the Vulnerable Software and Affected Versions: PHPJabbers Bus Reservation System version 1.1 Description: The issue allows an attacker to execute remote code due to insufficient input validation in the Languages section Labels any parameters field in System Options, which is used to...

8.8CVSS8AI score0.00147EPSS
Exploits2References5
Cvelist
Cvelist
added 2023/12/07 12:0 a.m.12 views

CVE-2023-48830

Shuttle Booking Software 2.0 is vulnerable to CSV Injection in the Languages section via an export...

9AI score0.00228EPSS
Exploits2References2
CVE
CVE
added 2023/12/07 12:0 a.m.30 views

CVE-2023-48830

Shuttle Booking Software 2.0 is affected by CVE-2023-48830 due to CSV injection in the Languages section during export. The root cause is insufficient input validation on the Unique ID field in the Reservations list used to construct CSV exports. Impact is exposure of injected content in exported...

8.8CVSS8.7AI score0.00228EPSS
Exploits2References2Affected Software1
Cvelist
Cvelist
added 2013/09/11 2:0 p.m.14 views

CVE-2013-4307

Multiple cross-site scripting XSS vulnerabilities in repo/includes/EntityView.php in the Wikibase extension for MediaWiki 1.19.x before 1.19.8, 1.20.x before 1.20.7, and 1.21.x before 1.21.2 allow 1 remote attackers to inject arbitrary web script or HTML via a label in the "In other languages"...

6.9AI score0.0042EPSS
Exploits0References6
Rows per page
Query Builder