Beaussier Roomphplanning — known CVE vulnerabilities

Every CVE whose affected-product data names Beaussier Roomphplanning, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2008-6633 — CVSS 7.5 (high): SQL injection vulnerability in RoomPHPlanning 1.5 allows remote attackers to execute arbitrary SQL commands via the idresa parameter to…
• CVE-2008-6634 — CVSS 7.5 (high): SQL injection vulnerability in RoomPHPlanning 1.5 allows remote attackers to execute arbitrary SQL commands via the idroom parameter to…
• CVE-2009-4669 — CVSS 7.5 (high): Multiple SQL injection vulnerabilities in RoomPHPlanning 1.6 allow remote attackers to execute arbitrary SQL commands via (1) the loginus…
• CVE-2009-4670 — CVSS 7.5 (high): admin/delitem.php in RoomPHPlanning 1.6 does not require authentication, which allows remote attackers to (1) delete arbitrary users via…
• CVE-2009-4671 — CVSS 7.5 (high): Login.php in RoomPHPlanning 1.6 allows remote attackers to bypass authentication and obtain administrative access by setting the…
• CVE-2008-2488 — CVSS 6.5 (medium): admin/userform.php in RoomPHPlanning 1.5 does not require administrative credentials, which allows remote authenticated users to create new…