Seat Reservation System Project

2 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2020-25763 Sep 30, 18:15 CRITICAL POC Act Now

Seat Reservation System version 1.0 suffers from an Unauthenticated File Upload Vulnerability allowing Remote Attackers to gain Remote Code Execution (RCE) on the Hosting Webserver via uploading PHP. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP RCE File Upload Seat Reservation System Seat Reservation System Project

NVD

CVSS 3.1

9.8

EPSS

5.0%

CVE-2020-25762 Sep 30, 18:15 CRITICAL POC THREAT Act Now

An issue was discovered in SourceCodester Seat Reservation System 1.0. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Seat Reservation System Seat Reservation System Project

NVD Exploit-DB

CVSS 3.1

9.1

EPSS

11.3%

CVE-2020-25763

EPSS 5% CVSS 9.8

CRITICAL POC Act Now

PHP RCE File Upload +2

NVD

CVE-2020-25762

EPSS 11% CVSS 9.1

CRITICAL POC THREAT Act Now

PHP SQLi Seat Reservation System +1

NVD Exploit-DB