Vulnerabilities

TI-2022-00997 CVE-2022-1102 · GHSA-gpfm-wj7m-f7jj

SourceCodester Royale Event Management System companyprofile.php cross site scripting

LOW 28

A vulnerability classified as problematic has been found in SourceCodester Royale Event Management System 1.0.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00713 Published 2023-01-07 No fix listed CWE-79

TI-2022-00996 CVE-2022-1101 · GHSA-6rhm-cmwf-2594

MEDIUM 50

A vulnerability was found in SourceCodester Royale Event Management System 1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01103 Published 2023-01-07 No fix listed CWE-287

TI-2022-17972 CVE-2022-38323 · GHSA-vvgr-j5p7-42pm

LOW 34

Event Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the component /Royal_Event/update_image.php.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0127 Published 2022-09-15 No fix listed CWE-434

TI-2022-10900 CVE-2022-28080 · GHSA-r54g-jm5f-4gvj

HIGH 71

Royal Event Management System v1.0 was discovered to contain a SQL injection vulnerability via the todate parameter.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.56907 Published 2022-05-05 No fix listed CWE-89