Approved changes feed: RSS · Atom

cpe:2.3:a:code-projects:online_lot_reservation_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCode Projects (a64d3912-7513-5560-97cf-6216c4da48a5)
ProductOnline Lot Reservation System (130dacbd-51a6-545a-8182-fcc362cc92d6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-7134 vulnerable 2026-06-08 08:07:05.423990 code-projects Online Lot Reservation System edithousepic.php unrestricted upload
MEDIUM (4.7)
A vulnerability was identified in code-projects Online Lot Reservation System 1.0. Affected is an unknown function of the file /edithousepic.php. Such manipulation of the argument image leads to unrestricted upload. The attack can be launched remotely. The exploit is publicly available and might be used.
Published: 2026-04-27T15:00:15.164Z
Updated: 2026-04-27T15:49:54.166Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-7133 vulnerable 2026-06-08 08:07:05.423516 code-projects Online Lot Reservation System activity.php unrestricted upload
MEDIUM (4.7)
A vulnerability was determined in code-projects Online Lot Reservation System 1.0. This impacts an unknown function of the file /activity.php. This manipulation of the argument directory causes unrestricted upload. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.
Published: 2026-04-27T14:45:10.494Z
Updated: 2026-04-29T13:52:54.655Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-7132 vulnerable 2026-06-08 08:07:05.422969 code-projects Online Lot Reservation System download.php readfile path traversal
MEDIUM (5.3)
A vulnerability was found in code-projects Online Lot Reservation System up to 1.0. This affects the function readfile of the file /download.php. The manipulation of the argument File results in path traversal. It is possible to launch the attack remotely. The exploit has been made public and could be used.
Published: 2026-04-27T14:30:13.115Z
Updated: 2026-04-27T16:30:16.995Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-7131 vulnerable 2026-06-08 08:07:05.422342 code-projects Online Lot Reservation System loginuser.php sql injection
HIGH (7.3)
A vulnerability has been found in code-projects Online Lot Reservation System up to 1.0. The impacted element is an unknown function of the file /loginuser.php. The manipulation of the argument email/password leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2026-04-27T14:15:10.731Z
Updated: 2026-04-27T17:54:52.563Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.