Export limit exceeded: 11119 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5

Export CSV
CVE-2025-40615

Reflected Cross-Site Scripting (XSS) vulnerability in Bookgy

Reflected Cross-Site Scripting (XSS) vulnerability in Bookgy. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending a malicious URL through the "TEXTO" parameter in /api/api_ajustes.php.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed
Vendors
Bookgy
Products
Bookgy
CVE-2025-40616

Reflected Cross-Site Scripting (XSS) vulnerability in Bookgy

Reflected Cross-Site Scripting (XSS) vulnerability in Bookgy. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending a malicious URL through the "IDRESERVA" parameter in /bkg_imprimir_comprobante.php.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed
Vendors
Bookgy
Products
Bookgy
CVE-2025-40617

SQL injection vulnerability in Bookgy

SQL injection vulnerability in Bookgy. This vulnerability could allow an attacker to retrieve, create, update and delete databases by sending an HTTP request through the "IDTIPO", "IDPISTA" and "IDSOCIO" parameters in /bkg_seleccionar_hora_ajax.php.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Bookgy
Products
Bookgy
CVE-2025-40618

SQL injection vulnerability in Bookgy

SQL injection vulnerability in Bookgy. This vulnerability could allow an attacker to retrieve, create, update and delete databases by sending an HTTP request through the "IDRESERVA"  parameter in /bkg_imprimir_comprobante.php

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Bookgy
Products
Bookgy
CVE-2025-40619

Improper access control vulnerability in Bookgy

Bookgy does not provide for proper authorisation control in multiple areas of the application. This deficiency could allow a malicious actor, without authentication, to reach private areas and/or areas intended for other roles.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Bookgy
Products
Bookgy