Lucene search
+L

3613 matches found

CNNVD
CNNVD
added 2026/02/20 12:00 a.m.13 views

WordPress plugin Court Reservation 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

7.1CVSS5.7AI score0.00186EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/02/20 12:00 a.m.10 views

PT-2026-21111

Name of the Vulnerable Software and Affected Versions webmuehle Court Reservation versions through 1.10.9 Description The software contains a flaw due to improper neutralization of input during web page generation, leading to a Reflected Cross-site Scripting issue. This allows for the injection o...

5.4AI score0.00186EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/02/19 9:33 p.m.13 views

CVE-2016-8338

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-5314. Reason: This candidate is a reservation duplicate of CVE-2016-5314. Notes: All CVE users should reference CVE-2016-5314 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental...

8.8CVSS5.6AI score0.05007EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2026/02/18 9:27 a.m.11 views

CVE-2012-5239

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2012-3548. Reason: This candidate is a reservation duplicate of CVE-2012-3548. Notes: All CVE users should reference CVE-2012-3548 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental...

4.3CVSS5.6AI score0.01552EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2026/02/18 12:31 a.m.9 views

CVE-2009-5027

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2010-2062. Reason: This candidate is a reservation duplicate of CVE-2010-2062. Notes: All CVE users should reference CVE-2010-2062 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental...

7.5CVSS5.6AI score0.04482EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2026/02/17 9:42 p.m.13 views

CVE-2009-0189

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2009-1012. Reason: This candidate is a reservation duplicate of CVE-2009-1012. Notes: All CVE users should reference CVE-2009-1012 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental...

10CVSS5.5AI score0.03922EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2026/02/17 6:33 p.m.13 views

CVE-2008-2804

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2008-2800. Reason: This candidate is a reservation duplicate of CVE-2008-2800. Notes: All CVE users should reference CVE-2008-2800 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental...

4.3CVSS5.6AI score0.02001EPSS
SaveExploits1References1
CVE
CVE
added 2026/02/17 3:04 p.m.62 views

CVE-2024-31118

CVE-2024-31118 affects the WordPress plugin SP Project & Document Manager (versions up to 4.70). The issue is a Missing Authorization vulnerability caused by incorrectly configured access control security levels, potentially enabling unauthorized access to project/document resources. Public sourc...

6.5CVSS8.5AI score0.00158EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/02/12 1:43 p.m.7 views

CVE-2026-1821

The Microtango plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'restkey' parameter of the mtreservation shortcode in all versions up to, and including, 0.9.29 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...

6.4CVSS5.8AI score0.00248EPSS
SaveExploits0References1
NVD
NVD
added 2026/02/11 9:15 a.m.10 views

CVE-2026-1821

The Microtango plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'restkey' parameter of the mtreservation shortcode in all versions up to, and including, 0.9.29 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...

6.4CVSS0.00248EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/02/11 12:00 a.m.24 views

PT-2026-7501

The Microtango plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'restkey' parameter of the mt reservation shortcode in all versions up to, and including, 0.9.29 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...

6.4CVSS5.8AI score0.00248EPSS
SaveExploits0References4
Patchstack
Patchstack
added 2026/02/05 8:34 a.m.12 views

WordPress Court Reservation plugin <= 1.10.9 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Skalucy in WordPress Plugin Court Reservation versions = 1.10.9...

7.1CVSS5.4AI score0.00186EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2026/02/03 10:16 p.m.12 views

CVE-2020-37081

Fishing Reservation System 7.5 contains multiple remote SQL injection vulnerabilities in admin.php, cart.php, and calendar.php that allow attackers to inject malicious SQL commands. Attackers can exploit vulnerable parameters like uid, pid, type, m, y, and code to compromise the database manageme...

7.1CVSS0.00198EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/02/03 10:01 p.m.36 views

CVE-2020-37081 Fishing Reservation System 7.5 - 'uid' SQL Injection

Fishing Reservation System 7.5 contains multiple remote SQL injection vulnerabilities in admin.php, cart.php, and calendar.php that allow attackers to inject malicious SQL commands. Attackers can exploit vulnerable parameters like uid, pid, type, m, y, and code to compromise the database manageme...

7.1CVSS0.00198EPSS
SaveExploits0References4
CVE
CVE
added 2026/02/03 10:01 p.m.21 views

CVE-2020-37081

CVE-2020-37081 describes multiple remote SQL injection vulnerabilities in Fishing Reservation System 7.5, affecting admin.php, cart.php, and calendar.php. The vulnerabilities allow attackers to inject SQL via parameters such as uid, pid, type, m, y, and code, potentially compromising the database...

7.1CVSS5.8AI score0.00198EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/02/03 10:01 p.m.5 views

CVE-2020-37081 Fishing Reservation System 7.5 - 'uid' SQL Injection

Fishing Reservation System 7.5 contains multiple remote SQL injection vulnerabilities in admin.php, cart.php, and calendar.php that allow attackers to inject malicious SQL commands. Attackers can exploit vulnerable parameters like uid, pid, type, m, y, and code to compromise the database manageme...

7.1CVSS5.8AI score0.00198EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/02/03 10:01 p.m.7 views

CVE-2020-37081

Fishing Reservation System 7.5 contains multiple remote SQL injection vulnerabilities in admin.php, cart.php, and calendar.php that allow attackers to inject malicious SQL commands. Attackers can exploit vulnerable parameters like uid, pid, type, m, y, and code to compromise the database manageme...

7.1CVSS5.8AI score0.00198EPSS
SaveExploits0References4Affected Software1
CNNVD
CNNVD
added 2026/02/03 12:00 a.m.15 views

Fishing Reservation System SQL注入漏洞

The Fishing Reservation System is a fishing reservation system developed by Fishing Reservation Company. Version 7.5 of the Fishing Reservation System has a SQL injection vulnerability. This vulnerability stems from multiple remote SQL injection vulnerabilities present in the admin.php, cart.php,...

7.1CVSS5.9AI score0.00198EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/01/23 9:17 p.m.8 views

CVE-2025-69095

Missing Authorization vulnerability in designthemes Reservation Plugin dt-reservation-plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Reservation Plugin: from n/a through = 1.7...

6.5CVSS5.4AI score0.00251EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/22 5:16 p.m.8 views

CVE-2025-69095

Missing Authorization vulnerability in designthemes Reservation Plugin dt-reservation-plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Reservation Plugin: from n/a through = 1.7...

6.5CVSS0.00251EPSS
SaveExploits0References1
Rows per page
Query Builder