EUVD-2008-6596

Malware in sbrugna...

CVE-2008-6634

SQL injection vulnerability in RoomPHPlanning 1.5 allows remote attackers to execute arbitrary SQL commands via the idroom parameter to weekview.php...

CVE-2008-6633

CVE-2008-6633 is a SQL injection vulnerability in RoomPHPlanning 1.5 that allows remote attackers to execute arbitrary SQL commands via the idresa parameter to resaopen.php. The provided documents identify the vulnerable component and parameter but do not include any remediation steps or patched ...

CVE-2008-6634

CVE-2008-6634 is a reported SQL injection vulnerability in RoomPHPlanning 1.5. The affected component is RoomPHPlanning 1.5, with the vulnerability exploitable through the idroom parameter to weekview.php, enabling remote attackers to execute arbitrary SQL commands. The root cause, as stated in t...

Code injection

admin/userform.php in RoomPHPlanning 1.5 does not require administrative credentials, which allows remote authenticated users to create new admin accounts...