What is the official website of RSK International Projects Group ?

The official website of RSK International Projects Group is https://rskgroup.com/service/environment/environmental-and-social-impact-assessments/.

What is RSK International Projects Group's cybersecurity risk score?

RSK International Projects Group has an AI-generated cybersecurity risk score of 750 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has RSK International Projects Group experienced?

According to Rankiteo, RSK International Projects Group currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has RSK International Projects Group been affected by any supply chain cyber incidents ?

According to Rankiteo, RSK International Projects Group has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does RSK International Projects Group have SOC 2 Type 1 certification ?

According to Rankiteo, RSK International Projects Group is not certified under SOC 2 Type 1.

Does RSK International Projects Group have SOC 2 Type 2 certification ?

According to Rankiteo, RSK International Projects Group does not hold a SOC 2 Type 2 certification.

Does RSK International Projects Group comply with GDPR ?

According to Rankiteo, RSK International Projects Group is not listed as GDPR compliant.

Does RSK International Projects Group have PCI DSS certification ?

According to Rankiteo, RSK International Projects Group does not currently maintain PCI DSS compliance.

Does RSK International Projects Group comply with HIPAA ?

According to Rankiteo, RSK International Projects Group is not compliant with HIPAA regulations.

Does RSK International Projects Group have ISO 27001 certification ?

According to Rankiteo,RSK International Projects Group is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does RSK International Projects Group operate in ?

RSK International Projects Group operates primarily in the Environmental Services industry.

How many employees does RSK International Projects Group have ?

RSK International Projects Group employs approximately 43 people worldwide.

Does RSK International Projects Group own any subsidiaries ?

RSK International Projects Group presently has no subsidiaries across any sectors.

How many LinkedIn followers does RSK International Projects Group have ?

RSK International Projects Group's official LinkedIn profile has approximately 3,117 followers.

What is the NAICS classification code for RSK International Projects Group ?

RSK International Projects Group is classified under the NAICS code 54162, which corresponds to Environmental Consulting Services.

Does RSK International Projects Group have a Crunchbase profile ?

No, RSK International Projects Group does not have a profile on Crunchbase.

Does RSK International Projects Group have a LinkedIn profile ?

Yes, RSK International Projects Group maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/rsk-international-projects-group.

How many cybersecurity incidents has RSK International Projects Group experienced ?

As of June 14, 2026, Rankiteo reports that RSK International Projects Group has experienced 1 cybersecurity incidents.

How many peer or competitor companies does RSK International Projects Group have ?

RSK International Projects Group has an estimated 8,482 peer or competitor companies worldwide.

What types of cybersecurity incidents has RSK International Projects Group faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Cyber Attack.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

RIPG

Boost Score +25 with badge (5 left)

750

/1000

Fair

775

/1000

Fair

RSK International Projects Group Vendor Cyber Rating & Cyber Score

rskgroup.com

Add Your Compliance Badge

Headquartered in Helsby, UK, RSK’s International Projects Group has been operating since 1996 and has a truly global reach, having worked on projects in Africa, Europe, the Middle East, and Papua New Guinea. Our highly experienced team offers a range of services including (but not limited to!) Environmental and Social Impact Assessments, Biodiversity Management Plans, Stakeholder Engagement Plans, and Land Acquisition and Resettlement Frameworks. IPG has substantial experience working on offshore wind farms, solar power plants, pipelines, oil drilling sites, roads, and many more besides. IPG is accustomed to working to the highest of international standards, including IFC, EBRD, IEB, and World Bank performance standards. We help our

RIPG A.I CyberSecurity Scoring

Scoring History

RIPG

RSK International Projects Group CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

RSK International P...

Cyber Attack

10/2025

JEN273212710242...

Loading…

A.I.

RIPG Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for RIPG

Incidents vs Environmental Services Industry Avg (This Year)

No incidents recorded for RSK International Projects Group in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for RSK International Projects Group in 2026.

Incident Types RIPG vs Environmental Services Industry Avg (This Year)

No incidents recorded for RSK International Projects Group in 2026.

Incident History - RIPG (X = Date, Y = Severity)

Loading…

SUBSIDIARY

RSK International Projects Group Subsidiaries

RIPG

Environmental Services

Website: https://rskgroup.com/service/environment/environmental-and-social-impact-assessments/

Company Size: 43

124

RSK GroupEnvironmental Services

BinniesCivil Engineering

Binnies DCWWCivil Engineering

ADASEnvironmental Services

RSK Habitat ManagementEnvironmental Services

ADAS ArboricultureEnvironmental Services

FarmPEPFarming

CANCivil Engineering

MWH TreatmentConstruction

RSK Middle EastEnvironmental Services

Copper ConsultancyPublic Relations and Communications Services

RSK AfricaEnvironmental Services

CAN RenewablesServices for Renewable Energy

RSK GeosciencesEnvironmental Services

RSK Geophysics and SafegroundEnvironmental Services

RSK GeospatialSurveying and Mapping Services

Carbon Zero ConsultingServices for Renewable Energy

CS2 Chartered SurveyorsConstruction

Nature PositiveEnvironmental Services

Cambridge Environmental Assessments, part of RSK ADAS LtdChemical Manufacturing

RSK EnvironmentEnvironmental Services

Absolute Solar and Wind LtdRenewable Energy Semiconductor Manufacturing

Envireau WaterEnvironmental Services

BMG ResearchMarket Research

Inis Environmental Consultants Ltd.Environmental Services

GeocoreCivil Engineering

The MSS GroupEnvironmental Services

Spencer Quantum LtdConstruction

Proeon Systems Ltd.Automation Machinery Manufacturing

CX Utilities Ltd (An RSK Company)Utilities

The Woodhouse Partnership Ltd (TWPL)Business Consulting and Services

Woodhouse AustralasiaBusiness Consulting and Services

EDP Consultants AustraliaEnvironmental Services

Stephenson HallidayEnvironmental Services

cbec eco-engineering UK & EuropeEnvironmental Services

C J Associates Geotechnical LtdConstruction

RSK WildingEnvironmental Services

Salix River and WetlandEnvironmental Services

Richard Irvin FM LimitedFacilities Services

ADAS LandscapeArchitecture and Planning

RSK APACEnvironmental Services

WatertrainEducation

Silcock Leedham Group LimitedConstruction

HydrofixServices for Renewable Energy

RSK ResponseEnvironmental Services

W Crowder & Sons LtdWholesale

Ian Farmer Associates (1998) LimitedCivil Engineering

Up and UnderCivil Engineering

Pharos Generator Services LimitedMechanical Or Industrial Engineering

RSK AcousticsArchitecture and Planning

RSK NetherlandsEnvironmental Services

RSK AsbestosEnvironmental Services

MG Scaffolding LtdConstruction

RSK BENELUX BVEnvironmental Services

HI-LINEEnvironmental Services

Calibrate Energy LtdRenewable Energy Semiconductor Manufacturing

RSK EnvironnementBusiness Consulting and Services

Aurora Health Physics Services LtdEnvironmental Services

RSK EcologyEnvironmental Services

CR Civil EngineeringCivil Engineering

Nicholas O'Dwyer LtdEnvironmental Services

Civil Engineering InternationalCivil Engineering

Amphos 21Environmental Services

WRc GroupResearch Services

WGM Engineering LtdEngineering Services

Structural SoilsCivil Engineering

AxisOil and Gas

Headland Archaeology (UK) LtdEnvironmental Services

PellingsConstruction

Centara Ltd - Surveying, Engineering and CADUtilities

EcologiaEnvironmental Services

RSK Ireland Ltd.Environmental Services

FR ConsultantsConstruction

RSK BiocensusEnvironmental Services

Jennings O'Donovan & PartnersCivil Engineering

Central AllianceConstruction

SCPCivil Engineering

RSK AustraliaEnvironmental Services

COGNICAConstruction

ADAS PlanningArchitecture and Planning

Leap EnvironmentalEnvironmental Services

Non Destructive Testing Services LtdConstruction

RoC ConsultingConstruction

EDPBusiness Consulting and Services

Southern Ecological Solutions (SES)Environmental Services

Virtus EnergyComputers and Electronics Manufacturing

1stinrailCivil Engineering

Optisol Services LtdRenewable Energy Semiconductor Manufacturing

FishtekEnvironmental Services

MilestoneConstruction

Richard Allitt Associates LtdCivil Engineering

Remote Aerial SurveysPhotography

rsim Remote SimulationsCivil Engineering

RemedX LtdEnvironmental Services

Streetwise UK Management LtdConstruction

TWIG GroupEnvironmental Services

B-Line and Easy2PlotPrinting Services

RSK LDE (Land and Development Engineering)Civil Engineering

RSK DACH-RegionEnvironmental Services

WaldramsReal Estate

Milner AssociatesConstruction

LARSEN WATER MANAGEMENT LTDUtilities

Advantage RSKAlternative Dispute Resolution

Smith + Kennedy ArchitectsArchitecture and Planning

Acies Civil and Structural LtdCivil Engineering

Minerex Environmental Ltd.Environmental Services

ADEV ENVIRONNEMENTEnvironmental Services

RSK CreativeDesign Services

ATV Contract Services LtdEnvironmental Services

RGM Environmental, Science and Technical support servicesEnvironmental Services

Travis BakerCivil Engineering

RSK Consents SolutionsUtilities

Kirton Water Treatment ServicesUtilities

RSK RadiologicalEnvironmental Services

Brown & May Marine LtdFisheries

RSK IWS Integrated Waste Solutions LtdUtilities

Dermot Casey Tree Care Ltd.Consumer Services

ATP Architects & Building SurveyorsArchitecture and Planning

Treefellers LtdEnvironmental Services

Hawkins Electrical LtdAppliances, Electrical, and Electronics Manufacturing

Technik GSConstruction

Enviroflow Management LimitedUtilities

EDP Singapore PTEBusiness Consulting and Services

Homer Burgess LtdIndustrial Machinery Manufacturing

Loading…

RSK International Projects Group Similar Companies

Rentokil Initial

cb rentokil-initial.com

Rentokil Initial plc employs c.68,500 people across 89 countries - offering the experience and expertise of a multi-national organisation, whilst delivering services with the agility and characteristics of a local business. As world leaders in Pest Control and Hygiene & Well-being services, we deliver services that protect people and enhance lives, to commercial and private customers worldwide. Rentokil Initial plc is listed on the London Stock Exchange (FTSE 100).

RSK Group

rskgroup.com

RSK Group is a global leader in the delivery of environmental and engineering solutions. We recognise the urgent need for sustainable change and know that this will be achieved by delivering meaningful action, not just words. We are committed to supporting our clients and societies as they navigate these complex challenges, while making a positive impact. The business was founded in 1989, originally focused on providing environmental consultancy services to global energy clients. Today, while we remain a leader in environmental consultancy, the business is significantly more diverse. RSK delivers an unrivalled breadth and depth of environmental and engineering services, either as stand-alone projects or as large and integrated multidisciplinary solutions. The group believes this emphasis on multidisciplinary collaboration is essential for successfully addressing complex global challenges. This is why we have brought together pragmatic advice, forward-thinking engineering, cutting-edge innovation, digital solutions, and best-in-class delivery services. The group continues to deliver its ambitious global growth strategy. It now comprises more than 200 companies and employs over 16,000 people.

Environment Agency

www.gov.uk

We are the Environment Agency. We are the biggest and most wide-ranging environmental regulator in Europe. We work with businesses and communities to protect and improve the environment, for people and wildlife. And the need for our work is becoming ever more important. We protect and improve the environment across England to: • reduce the risks to people and properties from flooding • help businesses and communities adapt to climate change • reduce pressures on biodiversity • help businesses to make sure they don’t harm the environment through pollution or taking too much water • issue licences and permits, and take action against people who don’t take their environmental responsibilities seriously. None of this is possible without a multi-talented team of professional and dedicated people. And just like the environment we help to care for, we’re home to an incredible diversity of skills and knowledge. Today, we employ more than 12,000 people throughout England in a wide range of roles. You’ll find leading scientists and prominent geologists alongside public relations professionals, planners and policy advisors. We employ lawyers, enforcement officers and engineers, conservation scientists and marine biologists. And of course we have a wide team of support staff. We employ people at all stages of their career, from recent graduates to experienced leaders and internationally-renowned experts. Find out how we manage our social media accounts at https://www.gov.uk/government/organisations/environment-agency/about/social-media-use

Grupo Tragsa

tragsa.es

Tragsa Group is a group of public companies, integrated in the State Industrial Ownership Corporation (SEPI), which has become a full service supplier and a reference company to Public Administrations. It is formed by four enterprises: Tragsa (1977) responsible for works and services' execution and Tragsatec (1989) which performs engineering works and technical assistance for every sections of the Group. By these companies, the Group is able to take part in every stage of any project, from its conception and design to its execution. 40 years of experience working for Public Administrations and at the service of society, have settle this business group at the front line of the various fields where it intervenes, from agricultural, forest, livestock and rural development services to environmental conservation and protection. Tragsa Group is represented in all the national territory, what makes it possible to give a quick and efficient response to any request that may be done from the central, autonomic and local administrations. Moreover, our collaboration in more than 120 projects of Spanish cooperation – in over 35 different countries of Northern Africa, Sub-Saharan Africa, Latin America and the Caribbean, Asia, Europe and the Middle East – has given the company international importance. In every field of activity, the differentiating factor of the Group stands in its proved experience, its capacity to give a fast-response and adapt its work to Administration’s needs, and its high I+D+I profile, what makes the group able to provide leading edge technology and the highest quality services

WM

wm.com

WM is North America's leading provider of integrated environmental solutions. We partner with our customers and communities to manage and reduce waste from collection to disposal while recovering valuable resources and creating clean, renewable energy. We are on a quest for environmental performance, a mission to maximize resource value, while minimizing – and even eliminating – environmental impact so that both our economy and our environment can thrive. WM tailors its services to meet the needs of each customer group and to ensure consistent, superior service at the local level. Headquartered in Houston, the company serves nearly 20 million municipal, commercial, industrial, and residential customers through a network of 367 collection operations, 355 transfer stations, 273 active landfill disposal sites, 16 waste-to-energy plants, 104 recycling plants, and 111 beneficial-use landfill gas projects.

Dalkia

dalkia.fr

Dalkia : ensemble, relevons le défi climatique ! Depuis 85 ans, Dalkia, filiale du groupe EDF et leader dans les services énergétiques, investit et développe les énergies renouvelables et de récupération et accompagne ses clients dans la durée pour les aider à faire des économies d'énergie et à réduire leurs émissions de CO2. Plus de 20 000 salariés présents partout en France et à l'international assurent la maintenance et l'exploitation des installations de sites industriels, de bâtiments tertiaires, de collectivités, d'établissements de santé, de logements, avec des solutions innovantes et performantes, pour accélérer la décarbonation des sites et des territoires. Retrouvez nos solutions sur notre site écoresponsable www.dalkia.fr

Veolia

veolia.com

Veolia group aims to be the benchmark company for ecological transformation. With nearly 220,000 employees worldwide, the Group designs and provides game-changing solutions that are both useful and practical for water, waste and energy management. Through its three complementary business activities, Veolia helps to develop access to resources, preserve available resources, and replenish them. In 2021, the Veolia group supplied 79 million people with drinking water and 61 million people with wastewater service, produced nearly 48 million megawatt hours of energy and treated 48 million metric tons of waste. Veolia Environnement (listed on Paris Euronext: VIE) recorded consolidated revenue of €28.508 billion in 2021. ---- Le groupe Veolia a pour ambition de devenir l’entreprise de référence de la transformation écologique. Présent sur les cinq continents avec près de 220 000 salariés, le Groupe conçoit et déploie des solutions utiles et concrètes pour la gestion de l’eau, des déchets et de l’énergie qui participent à changer radicalement la donne. Au travers de ses trois activités complémentaires, Veolia contribue à développer l’accès aux ressources, à préserver les ressources disponibles et à les renouveler. En 2021, le groupe Veolia a servi 79 millions d’habitants en eau potable et 61 millions en assainissement, produit près de 48 millions de mégawattheures et valorisé 48 millions de tonnes de déchets. Veolia Environnement (Paris Euronext : VIE) a réalisé en 2021 un chiffre d’affaires consolidé de 28,508 milliards d’euros.

Republic Services

republicservices.com

Republic Services provides the most complete set of recycling, waste and environmental solutions from a single-source provider. We partner with customers to help them achieve their sustainability goals, driving both environmental and economic sustainability. We offer advanced recycling; solid waste, special waste and hazardous waste treatment and disposal; field and industrial services; 24/7 emergency response; and equipment rental and cleaning. We use our expertise to find new opportunities to reduce waste and promote circularity. From our network of state-of-the-art recycling centers to converting gas generated by our landfills into renewable energy to helping companies set and meet their sustainability goals – our 42,000 employees provide sustainable solutions that deliver results. #SustainabilityinAction

Clean Harbors

cb cleanharbors.com

Clean Harbors is North America’s leading provider of environmental and industrial services. The Company serves a diverse customer base, including a majority of Fortune 500 companies. Its customer base spans a number of industries, including chemical, and manufacturing, as well as numerous government agencies. These customers rely on Clean Harbors to deliver a broad range of services such as end-to-end hazardous waste management, emergency spill response, industrial cleaning and maintenance, and recycling services. Through its Safety-Kleen subsidiary, Clean Harbors also is North America’s largest re-refiner and recycler of used oil and a leading provider of parts washers and environmental services to commercial, industrial and automotive customers. Founded in 1980 and based in Massachusetts, Clean Harbors operates throughout the United States, Canada, Mexico and Puerto Rico.

Loading…

NEWS

RSK International Projects Group CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

April 09, 2025 07:00 AM

Western Project Services merges with Projence

RSK has merged two of its project management businesses, Projence and Western Project Services, into a single brand, strengthening its end-to-end project...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-12175

SUMMARY

A vulnerability was detected in CodeAstro Student Attendance Management System 1.0. Impacted is an unknown function of the file /attendance-php/Admin/createStudents.php. Performing a manipulation of the argument admissionNumber results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used.

Published

Date2026-06-13

Updated

Date2026-06-13

RISK INFORMATION (Score: 4.7)

cvss2

Base Score: 5.8

Complexity: LOW

AV:N/AC:L/Au:M/C:P/I:P/A:P

cvss3

Base Score: 4.7

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.0

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

1.2

REFERENCES

CVE-2026-12174

SUMMARY

A security vulnerability has been detected in D-Link DCS-935L 1.10.01. This issue affects the function snprintf of the file /web/cgi-bin/greece/rhea of the component HTTP Handler. Such manipulation of the argument data leads to format string. The attack may be launched remotely. The exploit has been disclosed publicly and may be used.

Published

Date2026-06-13

Updated

Date2026-06-13

RISK INFORMATION (Score: 8.8)

cvss2

Base Score: 9.0

Complexity: LOW

AV:N/AC:L/Au:S/C:C/I:C/A:C

cvss3

Base Score: 8.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 7.4

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

2.8

REFERENCES

CVE-2026-12183

SUMMARY

Nefteprodukttekhnika BUK TS-G Gas Station Automation System 2.9.1 through 2.10.2 on Linux contains an Improper Authentication vulnerability (CWE-287) in the system configuration module. The /php/ajax-login.php endpoint returns userid=1 (administrator) in response to any HTTP POST request that supplies arbitrary credentials (e.g., action=dologin&login=<any_value>&pwd=<any_value>), and subsequent privileged endpoints under /php/ajax-main.php and /modules/* do not validate a server-side session. A remote unauthenticated attacker can invoke any administrative action exposed by the configuration module, including reading and modifying user rules, fuel tank gauges, fuel dispensers, relays, cash registers, bank terminals, fuel cards, price and customer displays, cash collection, and pricing rules.

Published

Date2026-06-13

Updated

Date2026-06-13

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

3.9

REFERENCES

CVE-2026-6428

SUMMARY

SQL Injection in reports/catalogue_out.pl in Koha Community Koha through 22.11.37, 23.x, 24.x before 24.11.16, 25.05.x before 25.05.11, 25.11.x before 25.11.05, 26.05.x before 26.05.01, and 26.11.x before 26.11.00 allows an authenticated staff user with the Reports module flag to read arbitrary data from the Koha application database via the Filter URL parameter when the Criteria parameter matches /branchcode/. The vulnerable sink in sub calculate concatenates the unmodified Filter request parameter directly into a LIKE clause of the auxiliary $strsth2 statement and executes it via DBI without bound parameters: my $f = @$filters[0]; $f =~ s/\*/%/g; $strsth2 .= " AND $column LIKE '$f' "; This enables error-based SQL injection (e.g., via EXTRACTVALUE) and full read access to sensitive tables including borrowers (password hashes, 2FA secrets, PII), borrower_password_recovery, api_keys, and sessions. Proof of concept (error-based, single request): GET /cgi-bin/koha/reports/catalogue_out.pl?do_it=1&output=screen&Limit=10&Criteria=branchcode&Filter=x'+AND+EXTRACTVALUE(1,CONCAT(0x7e,VERSION(),0x7c,USER(),0x7c,DATABASE(),0x7e))--+- Cookie: CGISESSID=<LIBRARIAN_SESSION> The response body contains the DBI exception leaking the MariaDB version, database user, client IP, and database name, after which arbitrary data can be paged out using LIMIT n,1 / SUBSTRING(...). The vulnerable sink was introduced in commit 6bb77ae3e4 (2008-07-09); CVE-2015-4633 patched the same class in sibling files but did not generalise the fix to reports/catalogue_out.pl. Fixed in Koha 22.11.38, 24.11.16, 25.05.11, 25.11.05, 26.05.01, and 26.11.00 by replacing the raw concatenation with a parameterised placeholder.

Published

Date2026-06-13

Updated

Date2026-06-13

RISK INFORMATION (Score: 7.6)

cvss2

Base Score: 7.5

Complexity: LOW

AV:N/AC:L/Au:S/C:C/I:N/A:P

cvss3

Base Score: 7.6

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L

cvss4

Base Score: 5.6

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:X/V:C/RE:X/U:Amber

Impact Score

4.7

Exploitability

2.8

REFERENCES

CVE-2026-5513

SUMMARY

The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'bookly-customer-full-name' cookie in versions up to, and including, 27.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Exploitation requires 'Remember personal information in cookies' setting to be enabled (disabled by default).

Published

Date2026-06-13

Updated

Date2026-06-13

RISK INFORMATION (Score: 7.2)

cvss3

Base Score: 7.2

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

Impact Score

2.7

Exploitability

3.9

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…