Lucene search
K

14 matches found

NVD
NVD
added 2025/07/11 8:15 p.m.3 views

CVE-2025-7456

A vulnerability, which was classified as critical, has been found in Campcodes Online Movie Theater Seat Reservation System 1.0. Affected by this issue is some unknown functionality of the file /reserve.php. The manipulation of the argument ID leads to sql injection. The attack may be launched...

9.8CVSS0.00277EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2024/01/13 12:0 a.m.2 views

PT-2024-15621 · Unknown · Code-Projects Simple Online Hotel Reservation System

Name of the Vulnerable Software and Affected Versions: code-projects Simple Online Hotel Reservation System version 1.0 Description: A vulnerability has been found in the code-projects Simple Online Hotel Reservation System, affecting the file add reserve.php of the Make a Reservation Page...

6.1CVSS4.2AI score0.00059EPSS
Exploits1References6
Openbugbounty
Openbugbounty
added 2018/06/27 1:17 a.m.10 views

naniwatourist.jp XSS vulnerability

Open Bug Bounty ID: OBB-637292 Description| Value ---|--- Affected Website:| naniwatourist.jp Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Exploits0
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.26 views

phpScheduleIt <= 1.2.10 (reserve.php) Remote Code Execution Exploit

No description provided by source. ?php / ------------------------------------------------------------------- phpScheduleIt = 1.2.10 reserve.php Remote Code Execution Exploit ------------------------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom...

7.1AI score
Exploits0
Packet Storm
Packet Storm
added 2011/10/27 12:0 a.m.33 views

phpScheduleIt PHP reserve.php start_date Parameter Arbitrary Code Injection

$Id: phpscheduleitstartdate.rb 14073 2011-10-26 18:06:12Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

6.8CVSS0.3AI score0.77215EPSS
Exploits5
Metasploit
Metasploit
added 2011/10/26 6:6 p.m.15 views

phpScheduleIt PHP reserve.php start_date Parameter Arbitrary Code Injection

This module exploits an arbitrary PHP code execution flaw in the phpScheduleIt software. This vulnerability is only exploitable when the magicquotesgpc PHP option is 'off'. Authentication is not required to exploit the bug. Version 1.2.10 and earlier of phpScheduleIt are affected. This module...

6.8CVSS7.7AI score0.77215EPSS
Exploits5
OpenVAS
OpenVAS
added 2009/07/20 12:0 a.m.18 views

phpScheduleIt 'reserve.php' RCE Vulnerability

phpScheduleIt is prone to a vulnerability that lets remote attackers execute arbitrary code because the application fails to sanitize user-supplied input. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

6.8CVSS7.3AI score0.77215EPSS
Exploits5References1
OpenVAS
OpenVAS
added 2009/07/20 12:0 a.m.22 views

phpScheduleIt 'reserve.php' Remote Code Execution Vulnerability

phpScheduleIt is prone to a vulnerability that lets remote attackers execute arbitrary code because the application fails to sanitize user- supplied input. An attacker can leverage this issue to execute arbitrary PHP code on an affected computer with the privileges of the webserver process...

6.8CVSS0.4AI score0.77215EPSS
Exploits5References2
NVD
NVD
added 2009/02/13 6:30 p.m.9 views

CVE-2008-6132

Eval injection vulnerability in reserve.php in phpScheduleIt 1.2.10 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary PHP code via the startdate parameter...

6.8CVSS7.7AI score0.77215EPSS
Exploits5References8
Cvelist
Cvelist
added 2009/02/13 6:0 p.m.11 views

CVE-2008-6132

Eval injection vulnerability in reserve.php in phpScheduleIt 1.2.10 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary PHP code via the startdate parameter...

7.6AI score0.77215EPSS
Exploits5References8
CVE
CVE
added 2009/02/13 6:0 p.m.49 views

CVE-2008-6132

phpScheduleIt 1.2.10 and earlier is affected by an eval injection in reserve.php's start_date parameter when magic_quotes_gpc is disabled, allowing remote code execution. The vulnerability is confirmed by multiple sources (NVD entry CVE-2008-6132; OpenVAS and CVE cross-references; Metasploit modu...

6.8CVSS7.8AI score0.77215EPSS
Exploits5References8Affected Software1
seebug.org
seebug.org
added 2008/10/02 12:0 a.m.24 views

phpScheduleIt &lt;= 1.2.10 (reserve.php) Remote Code Execution Exploit

No description provided by source. ?php / ------------------------------------------------------------------- phpScheduleIt = 1.2.10 reserve.php Remote Code Execution Exploit ------------------------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom...

7.1AI score
Exploits0
0day.today
0day.today
added 2008/10/01 12:0 a.m.30 views

phpScheduleIt <= 1.2.10 (reserve.php) Remote Code Execution Exploit

Exploit for unknown platform in category web applications =================================================================== phpScheduleIt settitletranslate"Processing $Class"; 53. $t-printHTMLHeader; 54. $t-startMain; 55. 56. processreservation$POST'fn'; 57. 58. else 59. $resinfo = getResInfo;...

7.1AI score
Exploits0
exploitpack
exploitpack
added 2008/10/01 12:0 a.m.34 views

phpScheduleIt 1.2.10 - reserve.php Remote Code Execution

phpScheduleIt 1.2.10 - reserve.php Remote Code Execution settitletranslate"Processing $Class"; 53. $t-printHTMLHeader; 54. $t-startMain; 55. 56. processreservation$POST'fn'; 57. 58. else 59. $resinfo = getResInfo; 60. $t-settitle$resinfo'title'; 61. $t-printHTMLHeader; 62. $t-startMain; 63...

8.1AI score
Exploits0
Rows per page
Query Builder