Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 6

Export CSV
CVE-2026-129134

MRBS before 1.13.0 Password Reset Poisoning via Host Header Injection

MRBS before 1.13.0 contains a password reset poisoning vulnerability that allows unauthenticated attackers to redirect reset links by forging the Host header when $url_base is unset. Attackers can request a reset for a victim so AuthDb::notifyUser() emails a link pointing to their host, capturing the reset key when opened to take over accounts including administrators.

CVSS 4.0 · 8.6 High EPSS n/a KEV · Not listed
Vendors
Meeting-room-booking-system
Products
Mrbs-code
CVE-2026-129133

MRBS before 1.13.0 CSV Formula Injection via Report Export

MRBS before 1.13.0 contains a CSV formula injection vulnerability that allows authenticated users to inject spreadsheet formulas because the escape() function in web/report.php fails to neutralize leading formula characters. Attackers can store formulas in booking names, descriptions or custom fields that execute when privileged users open exported CSV reports, enabling data exfiltration or command execution via DDE.

CVSS 4.0 · 5.1 Medium EPSS n/a KEV · Not listed
Vendors
Meeting-room-booking-system
Products
Mrbs-code
CVE-2026-129132

MRBS before 1.13.0 LDAP Injection via AuthLdap.php Authentication Filter

MRBS before 1.13.0 contains an LDAP injection vulnerability in web/lib/MRBS/Auth/AuthLdap.php that interpolates unescaped login usernames into DN search and group-membership filters. Attackers with valid directory credentials outside the required group can submit crafted usernames that make the group filter always true, bypassing access restrictions.

CVSS 4.0 · 2.3 Low EPSS n/a KEV · Not listed
Vendors
Meeting-room-booking-system
Products
Mrbs-code
CVE-2026-124474

MRBS before 1.12.3 Reflected XSS via error parameter of view_entry.php

MRBS (Meeting Room Booking System) before 1.12.3 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject script via the error parameter of view_entry.php. Attackers can send crafted links to logged-in users to read CSRF tokens, modify or delete bookings, or perform administrative actions.

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Meeting-room-booking-system
Products
Mrbs-code
CVE-2026-46382

Meeting Room Booking System has server-side request forgery in import functionality

The Meeting Room Booking System (MRBS) is a PHP-based application for booking meeting rooms. Prior to version 1.12.2, a user-supplied private/local URI can be made to be fetched without checks. Version 1.12.2 contains a fix. No known workarounds are available.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Meeting-room-booking-system
Products
Mrbs-code
CVE-2026-46688

Meeting Room Booking System has an unauthenticated open redirect

The Meeting Room Booking System (MRBS) is a PHP-based application for booking meeting rooms. Prior to version 1.12.2, an unauthenticated request can be made to redirect the user to a query-specified location. This allows an attacker to create a specially-crafted URL to an MRBS installation that will cause the user who clicks it to be redirected to the attacker-specified redirect URL, which could be a spoofed MRBS login page, for example. Version 1.12.2 contains a fix. No known workarounds are available.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Meeting-room-booking-system
Products
Mrbs-code