Approved changes feed: RSS · Atom

cpe:2.3:a:meeting-room-booking-system:mrbs-code:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMeeting Room Booking System (a620ab95-9fff-56f6-a25b-163a3f59d1d4)
ProductMrbs Code (3316866a-b22b-5e36-aab8-b209a2d0eb9d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-46382 vulnerable 2026-09-16 04:34:16.103558 Meeting Room Booking System has server-side request forgery in import functionality
The Meeting Room Booking System (MRBS) is a PHP-based application for booking meeting rooms. Prior to version 1.12.2, a user-supplied private/local URI can be made to be fetched without checks. Version 1.12.2 contains a fix. No known workarounds are available.
Published: 2026-08-12T23:39:50.870Z
Updated: 2026-08-13T17:53:05.546Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-46688 vulnerable 2026-09-16 04:34:16.013091 Meeting Room Booking System has an unauthenticated open redirect
The Meeting Room Booking System (MRBS) is a PHP-based application for booking meeting rooms. Prior to version 1.12.2, an unauthenticated request can be made to redirect the user to a query-specified location. This allows an attacker to create a specially-crafted URL to an MRBS installation that will cause the user who clicks it to be redirected to the attacker-specified redirect URL, which could be a spoofed MRBS login page, for example. Version 1.12.2 contains a fix. No known workarounds are available.
Published: 2026-08-12T23:30:25.563Z
Updated: 2026-08-13T13:11:21.589Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.