HM
Product
Hotel Management System
8
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 2High 4Medium 2Low 0
Watch
Add Hotel Management System to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-42773 | 9.1 | Aug 22 | An Incorrect Access Control vulnerability was found in /admin/edit_room_controller.php in Kashipara Hotel Management System v1.0, which allows an unauthenticated attacker to edit… Affected: 1.0 |
| CVE-2024-42775 | 9.1 | Aug 22 | An Incorrect Access Control vulnerability was found in /admin/add_room_controller.php in Kashipara Hotel Management System v1.0, which allows an unauthenticated attacker to add… Affected: 1.0 |
| CVE-2024-42772 | 7.5 | Aug 22 | An Incorrect Access Control vulnerability was found in /admin/rooms.php in Kashipara Hotel Management System v1.0, which allows an unauthenticated attacker to view valid hotel… Affected: 1.0 |
| CVE-2024-42774 | 7.5 | Aug 22 | An Incorrect Access Control vulnerability was found in /admin/delete_room.php in Kashipara Hotel Management System v1.0, which allows an unauthenticated attacker to delete valid… Affected: 1.0 |
| CVE-2024-42776 | 7.2 | Aug 22 | Kashipara Hotel Management System v1.0 is vulnerable to Incorrect Access Control via /admin/users.php Affected: 1.0 |
| CVE-2024-42767 | 7.2 | Aug 22 | Kashipara Hotel Management System v1.0 is vulnerable to Unrestricted File Upload RCE via /admin/add_room_controller.php Affected: 1.0 |
| CVE-2024-42769 | 6.1 | Aug 22 | A Reflected Cross Site Scripting (XSS) vulnerability was found in "/core/signup_user.php " of Kashipara Hotel Management System v1.0, which allows remote attackers to execute… Affected: 1.0 |
| CVE-2024-42771 | 4.8 | Aug 22 | A Stored Cross Site Scripting (XSS) vulnerability was found in " /admin/edit_room_controller.php" of the Kashipara Hotel Management System v1.0, which allows remote attackers to… Affected: 1.0 |
Showing 8