Vulnerabilities

TI-2024-00952 CVE-2024-1030 · GHSA-vwmq-g758-4rpf

Cogites eReserv tenancyDetail.php cross site scripting

LOW 25

A vulnerability was found in Cogites eReserv 7.7.58.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00368 Published 2024-01-30 No fix listed CWE-79

TI-2024-00951 CVE-2024-1029 · GHSA-wfg5-fmwh-w25j

LOW 27

A vulnerability was found in Cogites eReserv 7.7.58 and classified as problematic.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00355 Published 2024-01-30 No fix listed CWE-79

TI-2024-00948 CVE-2024-1026 · GHSA-g6fv-wqqw-hppg

LOW 27

A vulnerability was found in Cogites eReserv 7.7.58 and classified as problematic.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00312 Published 2024-01-30 No fix listed CWE-79

TI-2008-01898 CVE-2008-1975 · GHSA-qx2c-v92x-xp4m

LOW 35

SQL injection vulnerability in index.php in E-RESERV 2.1 allows remote attackers to execute arbitrary SQL commands via the ID_loc parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01003 Published 2008-04-27 No fix listed CWE-89