CVE-2025-63562

Summer Pearl Group Vacation Rental Management Platform prior to v1.0.2 suffers from insufficient server-side authorization. Authenticated attackers can call several endpoints and perform create/update/delete actions on resources owned by arbitrary users by manipulating request parameters e.g.,...

CVE-2025-63563

The CVE-2025-63563 affects Summer Pearl Group Vacation Rental Management Platform prior to v1.0.2. The root cause is improper invalidation of active sessions after a password change, enabling an attacker with a valid session token to retain access after the legitimate user changes their password....

CVE-2025-63561

CVE-2025-63561 affects the Summer Pearl Group Vacation Rental Management Platform prior to version 1.0.2 . The vulnerability is a Slowloris-style denial-of-service in the HTTP connection handling layer, where an attacker can open and maintain many slow or incomplete HTTP connections to exhaust th...

PT-2025-44671

Name of the Vulnerable Software and Affected Versions Summer Pearl Group Vacation Rental Management Platform versions prior to 1.0.2 Description The Summer Pearl Group Vacation Rental Management Platform is affected by inadequate server-side authorization. Authenticated attackers can access and...

CVE-2025-63561

Summer Pearl Group Vacation Rental Management Platform prior to 1.0.2 is susceptible to a Slowloris-style Denial-of-Service DoS condition in the HTTP connection handling layer, where an attacker that opens and maintains many slow or partially-completed HTTP connections can exhaust the server’s...

PT-2025-44673

Name of the Vulnerable Software and Affected Versions Summer Pearl Group Vacation Rental Management Platform versions prior to 1.0.2 Description The Summer Pearl Group Vacation Rental Management Platform does not invalidate active user sessions after a password change. This allows an attacker...

CVE-2025-5181

A vulnerability, which was classified as problematic, was found in Summer Pearl Group Vacation Rental Management Platform up to 1.0.1. This affects an unknown part of the file /spgpm/updateListing. The manipulation of the argument spgLsTitle leads to cross site scripting. It is possible to initia...

Summer Pearl Vacation Rental Management Platform 代码注入漏洞

Summer Pearl Vacation Rental Management Platform is a vacation rental management platform from Summer Pearl. A code injection vulnerability exists in Summer Pearl Vacation Rental Management Platform version 1.0.1 and earlier, which stems from cross-site scripting due to the operation of parameter...

Summer Pearl Vacation Rental Management Platform 输入验证错误漏洞

Summer Pearl Vacation Rental Management Platform is a vacation rental management platform from Summer Pearl, Inc. An input validation error vulnerability exists in Summer Pearl Vacation Rental Management Platform version 1.0.1 and prior versions, which stems from an open redirect due to the...

Summer Pearl Vacation Rental Management Platform 安全漏洞

Summer Pearl Vacation Rental Management Platform is a vacation rental management platform from Summer Pearl, Inc. A security vulnerability exists in Summer Pearl Vacation Rental Management Platform version 1.0.1 and earlier, which originates from cross-site request forgery...

Summer Pearl Vacation Rental Management Platform 访问控制错误漏洞

Summer Pearl Vacation Rental Management Platform is a vacation rental management platform from Summer Pearl, Inc. An access control error vulnerability exists in Summer Pearl Vacation Rental Management Platform version 1.0.1 and prior versions, which stems from information disclosure...

Summer Pearl Vacation Rental Management Platform 安全漏洞

Summer Pearl Vacation Rental Management Platform is a vacation rental management platform from Summer Pearl, Inc. A security vulnerability exists in Summer Pearl Vacation Rental Management Platform version 1.0.1 and prior versions that originates from an authorization bypass issue...