Search vulnerabilities

Results 2

Export CSV
CVE-2026-42569

phpvms: /importer authorization bypass causing full database wipe

phpVMS is a PHP application to run and simulate an airline. Prior to version 7.0.6, a critical vulnerability in phpVMS allowed unauthenticated access to a legacy import feature. This issue has been patched in version 7.0.6.

CVSS 3.1 · 9.4 Critical EPSS 1.2% KEV · Not listed
Vendors
Products
CVE-2012-6552

Unspecified vulnerability in admin/action.php in phpVMS 2.1.x before 2.1.935 has unknown impact and attack vectors.

CVSS 2.0 · 10.0 Critical EPSS 1.7% KEV · Not listed
Vendors
Products