Approved changes feed: RSS · Atom

cpe:2.3:a:magesh-k21:online-college-event-hall-reservation-system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMagesh K21 (c3e2b718-7fcf-5a29-a739-2cd9c0a17d0a)
ProductOnline College Event Hall Reservation System (9ec5cfac-82ea-56e1-98a0-99f527c5460f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-2535 vulnerable 2026-06-08 06:33:31.298484 MAGESH-K21 Online-College-Event-Hall-Reservation-System users.php cross site scripting
LOW (3.5)
A vulnerability has been found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /admin/users.php. The manipulation of the argument id leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-256972. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-03-17T01:00:07.511Z
Updated: 2024-08-01T19:18:46.999Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2534 vulnerable 2026-06-08 06:33:31.297888 MAGESH-K21 Online-College-Event-Hall-Reservation-System users.php sql injection
MEDIUM (6.3)
A vulnerability, which was classified as critical, was found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. This affects an unknown part of the file /admin/users.php. The manipulation of the argument user_id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-256971. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-03-16T23:31:04.359Z
Updated: 2024-08-01T19:18:47.946Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2533 vulnerable 2026-06-08 06:33:31.297507 MAGESH-K21 Online-College-Event-Hall-Reservation-System update-users.php cross site scripting
LOW (3.5)
A vulnerability, which was classified as problematic, has been found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. Affected by this issue is some unknown functionality of the file /admin/update-users.php. The manipulation of the argument id leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-256970 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-03-16T22:31:04.704Z
Updated: 2024-08-02T17:40:11.246Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2532 vulnerable 2026-06-08 06:33:31.296925 MAGESH-K21 Online-College-Event-Hall-Reservation-System update-users.php sql injection
MEDIUM (6.3)
A vulnerability classified as critical was found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/update-users.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-256969 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-03-16T22:00:09.557Z
Updated: 2024-08-12T16:23:23.381Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2531 vulnerable 2026-06-08 06:33:31.296485 MAGESH-K21 Online-College-Event-Hall-Reservation-System update-rooms.php unrestricted upload
MEDIUM (6.3)
A vulnerability classified as critical has been found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. Affected is an unknown function of the file /admin/update-rooms.php. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-256968. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-03-16T21:31:03.942Z
Updated: 2024-08-01T19:18:46.908Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2530 vulnerable 2026-06-08 06:33:31.296112 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2529 vulnerable 2026-06-08 06:33:31.295639 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2528 vulnerable 2026-06-08 06:33:31.295160 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2527 vulnerable 2026-06-08 06:33:31.294606 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2526 vulnerable 2026-06-08 06:33:31.294172 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2525 vulnerable 2026-06-08 06:33:31.293673 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2524 vulnerable 2026-06-08 06:33:31.293240 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2523 vulnerable 2026-06-08 06:33:31.292661 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2522 vulnerable 2026-06-08 06:33:31.292161 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2521 vulnerable 2026-06-08 06:33:31.291695 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2520 vulnerable 2026-06-08 06:33:31.291175 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2519 vulnerable 2026-06-08 06:33:31.290648 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2518 vulnerable 2026-06-08 06:33:31.290032 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2517 vulnerable 2026-06-08 06:33:31.289561 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2516 vulnerable 2026-06-08 06:33:31.289113 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2515 vulnerable 2026-06-08 06:33:31.288649 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2514 vulnerable 2026-06-08 06:33:31.286627 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.