Approved changes feed: RSS · Atom

cpe:2.3:a:satya-vinay:events-management-system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSatya Vinay (5b46458c-2b41-52ca-9a50-ff4977828318)
ProductEvents Management System (20c2b3ac-24b6-5f9a-b925-0a078c05c628)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-112144 vulnerable 2026-11-03 10:16:28.927578 satya-vinay Events-Management-System project.sql file access
MEDIUM (5.3)
A weakness has been identified in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f46f7871b83f425383a. This affects an unknown part of the file project.sql. Executing a manipulation can lead to files or directories accessible. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. The project was informed of the problem early through an issue report but has not responded yet.
Published: 2026-10-19T13:30:20.857Z
Updated: 2026-10-19T14:25:40.803Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-112141 vulnerable 2026-11-03 10:16:28.500776 satya-vinay Events-Management-System Registration-Edit doedit.php mysqli_query sql injection
HIGH (7.3)
A vulnerability was determined in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f46f7871b83f425383a. Affected is the function mysqli_query of the file doedit.php of the component Registration-Edit Handler. This manipulation of the argument id/name/title/year/gender/fromdate/todate/people causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The project was informed of the problem early through an issue report but has not responded yet.
Published: 2026-10-19T12:30:13.033Z
Updated: 2026-10-22T02:42:14.335Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-112143 vulnerable 2026-11-03 10:16:28.267558 satya-vinay Events-Management-System missing authentication
HIGH (7.3)
A security flaw has been discovered in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f46f7871b83f425383a. Affected by this issue is some unknown functionality. Performing a manipulation results in missing authentication. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified. Multiple endpoints are affected. The project was informed of the problem early through an issue report but has not responded yet.
Published: 2026-10-19T13:15:20.213Z
Updated: 2026-10-19T16:35:25.242Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-112142 vulnerable 2026-11-03 10:16:28.135748 satya-vinay Events-Management-System Registration-Delete dodelete.php sql injection
HIGH (7.3)
A vulnerability was identified in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f46f7871b83f425383a. Affected by this vulnerability is an unknown functionality of the file dodelete.php of the component Registration-Delete Handler. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. The project was informed of the problem early through an issue report but has not responded yet.
Published: 2026-10-19T13:00:19.942Z
Updated: 2026-10-19T18:37:40.003Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.