Vulnerabilidades de QuanticaLabs

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de QuanticaLabs: 2 registro(s), com severidade, exploração e correções.

MediCenter - Health Medical Clinic 1 Car Park Booking System 1

Somente exploradas (KEV) →

CVE-2017-20243 Alta · 8.2 CWE-89 09/06/2026

WordPress Car Park Booking Plugin SQL Injection via space_id

WordPress Car Park Booking Plugin version 13 October 17 contains a time-based SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the space_id parameter. Attackers can send GET requests to the booking-page endpoint with malicious space_id values using AND SLEEP() payloads to extract sensitive database information.

CVE-2026-28137 Alta · 7.1 CWE-79 05/03/2026

WordPress MediCenter - Health Medical Clinic WordPress Theme theme <= 14.9 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuanticaLabs MediCenter - Health Medical Clinic medicenter allows Reflected XSS.This issue affects MediCenter - Health Medical Clinic: from n/a through <= 14.9.