CVE-2024-1026

Cogites eReserv 7.7.58 is affected by a Cross-Site Scripting (XSS) vulnerability in front/admin/config.php, triggered by manipulating the id parameter to inject a script. The issue is exploitable remotely and the payload demonstrated in sources uses a script alert. Reported across multiple feeds ...

CVE-2024-1030

Cogites eReserv 7.7.58 is affected by a cross-site scripting vulnerability in the unknown portion of /front/admin/tenancyDetail.php, triggered by manipulating the id parameter. Exploitation appears remote and is supported by multiple sources in connected documents (e.g., Red Hat/CVE entries and P...

CVE-2024-1029

CVE-2024-1029 affects Cogites eReserv 7.7.58. The vulnerability lies in the web URI parameter Nom within /front/admin/tenancyDetail.php , where crafted input such as Dreux"> can trigger a cross-site scripting condition. Exploitation is described as remote, and the exploit has been publicly dis...