38 matches found
CVE-2025-32663
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in roninwp FAT Cooming Soon fat-coming-soon allows PHP Local File Inclusion.This issue affects FAT Cooming Soon: from n/a through = 1.1...
CVE-2025-22508
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in roninwp FAT Event Lite fat-event-lite allows PHP Local File Inclusion.This issue affects FAT Event Lite: from n/a through = 1.1...
CVE-2024-54220
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in roninwp FAT Services Booking fat-services-booking allows Stored XSS.This issue affects FAT Services Booking: from n/a through = 5.6...
CVE-2024-54215
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in roninwp Revy revy.This issue affects Revy: from n/a through = 1.18...
CVE-2024-54221
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in roninwp FAT Services Booking fat-services-booking.This issue affects FAT Services Booking: from n/a through = 5.6...
CVE-2024-54214
Unrestricted Upload of File with Dangerous Type vulnerability in roninwp Revy revy allows Upload a Web Shell to a Web Server.This issue affects Revy: from n/a through = 1.18...
CVE-2025-22718
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in roninwp FAT Event Lite fat-event-lite allows Stored XSS.This issue affects FAT Event Lite: from n/a through = 1.1...
CVE-2025-22718
CVE-2025-22718 : In roninwp FAT Event Lite (fat-event-lite), an authenticated Stored XSS vulnerability exists due to improper input neutralization during web page generation, affecting FAT Event Lite
CVE-2025-23915
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in roninwp FAT Event Lite fat-event-lite allows PHP Local File Inclusion.This issue affects FAT Event Lite: from n/a through = 1.1...
CVE-2025-22508
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in roninwp FAT Event Lite fat-event-lite allows PHP Local File Inclusion.This issue affects FAT Event Lite: from n/a through = 1.1...
PT-2025-4502 · Unknown · Roninwp Fat Event Lite
Name of the Vulnerable Software and Affected Versions: Roninwp FAT Event Lite versions 1.1 and earlier Description: The issue is related to an improper control of filename for include/require statement in a PHP program, also known as 'PHP Remote File Inclusion'. This allows PHP Local File...
CVE-2024-54220
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in roninwp FAT Services Booking fat-services-booking allows Stored XSS.This issue affects FAT Services Booking: from n/a through = 5.6...
CVE-2024-54220
CVE-2024-54220 concerns WordPress plugin FAT Services Booking (Roninwp FAT Services Booking). The issue is an Stored XSS caused by improper neutralization of input during web page generation, affecting FAT Services Booking versions up to 5.6 (n/a through 5.6). The CVSSv3.1/3.1 vector in the initi...
PT-2024-36093 · Unknown · Roninwp Revy
Name of the Vulnerable Software and Affected Versions: Roninwp Revy versions 1.18 and earlier Description: The issue is related to an Improper Neutralization of Special Elements used in an SQL Command, also known as a SQL Injection vulnerability. This vulnerability affects the Roninwp Revy...
PT-2024-36099 · Unknown · Roninwp Fat Services Booking
Name of the Vulnerable Software and Affected Versions: Roninwp FAT Services Booking versions n/a through 5.6 Description: The issue is related to improper neutralization of input during web page generation, which leads to a Cross-site Scripting XSS vulnerability. This allows for stored XSS attack...
CVE-2024-54221
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in roninwp FAT Services Booking fat-services-booking.This issue affects FAT Services Booking: from n/a through = 5.6...
CVE-2024-54221 WordPress FAT Services Booking plugin <= 5.6 - Unauthenticated SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in roninwp FAT Services Booking fat-services-booking.This issue affects FAT Services Booking: from n/a through = 5.6...
PT-2024-36100 · Roninwp · Roninwp Fat Services Booking
Name of the Vulnerable Software and Affected Versions: Roninwp FAT Services Booking versions n/a through 5.6 Description: The issue is related to an Improper Neutralization of Special Elements used in an SQL Command, also known as a SQL Injection vulnerability. This problem impacts Roninwp FAT...