Beaussier: >> Roomphplanning >> 1.5 Security Vulnerabilities
SQL injection vulnerability in RoomPHPlanning 1.5 allows remote attackers to execute arbitrary SQL commands via the idresa parameter to resaopen.php.
CVSS Score
7.5
EPSS Score
0.005
Published
2009-04-07
SQL injection vulnerability in RoomPHPlanning 1.5 allows remote attackers to execute arbitrary SQL commands via the idroom parameter to weekview.php.
CVSS Score
7.5
EPSS Score
0.002
Published
2009-04-07
admin/userform.php in RoomPHPlanning 1.5 does not require administrative credentials, which allows remote authenticated users to create new admin accounts.
CVSS Score
6.5
EPSS Score
0.028
Published
2008-05-28