Skip to content
OpenAdvisories

Product · meeting-room-booking-system

mrbs-code

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.1
    CVE-2026-129133

    MRBS before 1.13.0 contains a CSV formula injection vulnerability that allows authenticated users to inject spreadsheet…

    meeting-room-booking-system mrbs-code
  • Medium 6.1
    CVE-2026-124474

    MRBS before 1.12.3 Reflected XSS via error parameter of view_entry.php

    MRBS (Meeting Room Booking System) before 1.12.3 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject script via the error parameter of view_entry.php. Attackers can send crafted links to logged-in users to r…

    meeting-room-booking-system mrbs-code
  • Medium 6.9
    CVE-2026-46688

    Meeting Room Booking System has an unauthenticated open redirect

    The Meeting Room Booking System (MRBS) is a PHP-based application for booking meeting rooms. Prior to version 1.12.2, an unauthenticated request can be made to redirect the user to a query-specified location. This allows an attacker to create a specially-craf…

    meeting-room-booking-system mrbs-code