Approved changes feed: RSS · Atom

cpe:2.3:a:cogites:ereserv:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCogites (da9fb456-3415-5f0f-b0f4-7498bd17089e)
ProductEreserv (b023fab6-c366-5aff-aeb1-88a8c97f3487)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-1030 vulnerable 2026-06-08 06:25:39.028166 Cogites eReserv tenancyDetail.php cross site scripting
LOW (3.5)
A vulnerability was found in Cogites eReserv 7.7.58. It has been classified as problematic. This affects an unknown part of the file /front/admin/tenancyDetail.php. The manipulation of the argument id leads to cross site scripting. It is possible to initiate the attack remotely. The associated identifier of this vulnerability is VDB-252303.
Published: 2024-01-30T10:00:07.629Z
Updated: 2025-06-17T21:29:18.517Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-1029 vulnerable 2026-06-08 06:25:39.027588 Cogites eReserv tenancyDetail.php cross site scripting
LOW (3.5)
A vulnerability was found in Cogites eReserv 7.7.58 and classified as problematic. Affected by this issue is some unknown functionality of the file /front/admin/tenancyDetail.php. The manipulation of the argument Nom with the input Dreux"><script>alert('XSS')</script> leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-252302 is the identifier assigned to this vulnerability.
Published: 2024-01-30T05:31:05.090Z
Updated: 2025-06-17T19:44:36.725Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-1026 vulnerable 2026-06-08 06:25:39.025123 Cogites eReserv config.php cross site scripting
LOW (3.5)
A vulnerability was found in Cogites eReserv 7.7.58 and classified as problematic. This issue affects some unknown processing of the file front/admin/config.php. The manipulation of the argument id with the input %22%3E%3Cscript%3Ealert(%27XSS%27)%3C/script%3E leads to cross site scripting. The attack may be initiated remotely. The identifier VDB-252293 was assigned to this vulnerability.
Published: 2024-01-30T01:00:10.307Z
Updated: 2025-06-09T20:46:36.313Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.