Lucene search
+L

5 matches found

Cvelist
Cvelist
•added 2024/03/16 9:31 p.m.•38 views

CVE-2024-2531 MAGESH-K21 Online-College-Event-Hall-Reservation-System update-rooms.php unrestricted upload

A vulnerability classified as critical has been found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. Affected is an unknown function of the file /admin/update-rooms.php. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has...

6.5CVSS6.7AI score0.00694EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/03/16 7:31 p.m.•12 views

CVE-2024-2528 MAGESH-K21 Online-College-Event-Hall-Reservation-System update-rooms.php sql injection

A vulnerability was found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/update-rooms.php. The manipulation of the argument roomid leads to sql injection. It is possible to initiate the attack...

6.5CVSS7.2AI score0.00514EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/16 12:00 a.m.•2 views

CVE-2024-2530: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /admin/update-rooms.php. The manipulation of the argument id leads to cross site scripting. The attack may be initiate...

6.1CVSS3.9AI score0.00459EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/16 12:00 a.m.•2 views

CVE-2024-2528: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/update-rooms.php. The manipulation of the argument roomid leads to sql injection. It is possible to initiate the attack...

8.8CVSS5.5AI score0.00514EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/16 12:00 a.m.•2 views

CVE-2024-2531: Unrestricted Upload of File with Dangerous Type

A vulnerability classified as critical has been found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. Affected is an unknown function of the file /admin/update-rooms.php. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has...

8.8CVSS5.3AI score0.00694EPSS
SaveExploits0References2
Rows per page
Query Builder