Sourcecodester Royale Event Management System vulnerabilities

CVE-2022-1101 [CRITICAL] CWE-287 CVE-2022-1101: A vulnerability was found in SourceCodester Royale Event Management System 1.0. It has been rated as A vulnerability was found in SourceCodester Royale Event Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /royal_event/userregister.php. The manipulation leads to improper authentication. The attack may be initiated remotely. The identifier VDB-195785 was assigned to this vulnerability.

CVE-2022-1102 [MEDIUM] CWE-79 CVE-2022-1102: A vulnerability classified as problematic has been found in SourceCodester Royale Event Management S A vulnerability classified as problematic has been found in SourceCodester Royale Event Management System 1.0. Affected is an unknown function of the file /royal_event/companyprofile.php. The manipulation of the argument companyname/regno/companyaddress/companyemail leads to cross site scripting. It is possible to launch the attack remotely. VDB-195786