Lucene search
+L

90 matches found

NVD
NVD
•added 2026/09/29 5:16 a.m.•10 views

CVE-2026-102264

A vulnerability was found in mwasikz robo-cafe-rms up to 228c44a02823f04e85db32b7137809a2856148fc. The impacted element is an unknown function of the file frontend/update-account.php of the component Edit Profile Feature. Performing a manipulation of the argument Name/Address/City results in cros...

5.1CVSS0.00191EPSS
SaveExploits0References4
CVE
CVE
•added 2026/09/29 4:30 a.m.•9 views

CVE-2026-102264

A cross-site scripting (XSS) vulnerability exists in the Edit Profile Feature of mwasikz robo-cafe-rms (affected up to commit 228c44a02823f04e85db32b7137809a2856148fc). The flaw is located within an unknown function in the frontend/update-account.php file, where manipulating the Name , Address , ...

5.1CVSS3.7AI score0.00191EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/29 4:30 a.m.•7 views

EUVD-2026-88640

A vulnerability was found in mwasikz robo-cafe-rms up to 228c44a02823f04e85db32b7137809a2856148fc. The impacted element is an unknown function of the file frontend/update-account.php of the component Edit Profile Feature. Performing a manipulation of the argument Name/Address/City results in cros...

5.1CVSS3.7AI score0.00191EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/19 12:00 a.m.•0 views

CVE-2026-16220: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in code-projects Online Examination System 1.0. This vulnerability affects unknown code of the file /account.php?q=quiz. Such manipulation of the argument eid/n/t leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to t...

5.3CVSS3.9AI score0.0047EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2007-5955

Malware in sbrugna...

4.3CVSS6.4AI score0.01707EPSS
SaveExploits0References16
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2008-1233

Malware in sbrugna...

4.3CVSS6.4AI score0.01022EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2021-32996

Malicious code in bioql PyPI...

10CVSS9.4AI score0.01556EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•8 views

EUVD-2024-48788

Malicious code in bioql PyPI...

5.4CVSS4.8AI score0.00447EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2025/09/15 12:00 a.m.•12 views

PT-2025-37442

Name of the Vulnerable Software and Affected Versions: SourceCodester Student Grading System version 1.0 Description: A flaw exists in the SourceCodester Student Grading System that may allow for SQL injection. The issue affects unknown code within the /update account.php file. Manipulation of th...

8.8CVSS6.5AI score0.00381EPSS
SaveExploits1References9
CNVD
CNVD
•added 2025/05/22 12:00 a.m.•76 views

CampCodes Online Shopping Portal /my-account.php File SQL Injection Vulnerability

CampCodes Online Shopping Portal is an online shopping portal from CampCodes, Inc. CampCodes Online Shopping Portal suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter Name in the file /my-account.php. An attacker...

9.8CVSS8.1AI score0.00507EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/05/19 12:00 a.m.•15 views

PT-2025-21934 · Unknown · Campcodes Online Shopping Portal

Name of the Vulnerable Software and Affected Versions: Campcodes Online Shopping Portal version 1.0 Description: A critical issue affects some unknown processing of the file /my-account.php. The manipulation of the argument Name leads to SQL injection. The attack may be initiated remotely. The...

9.8CVSS7.5AI score0.00507EPSS
SaveExploits1References13
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/19 12:00 a.m.•2 views

CVE-2025-4929: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Online Shopping Portal 1.0. It has been rated as critical. This issue affects some unknown processing of the file /my-account.php. The manipulation of the argument Name leads to sql injection. The attack may be initiated remotely. The exploit has been...

9.8CVSS7AI score0.00507EPSS
SaveExploits1References1
CVE
CVE
•added 2024/12/26 9:31 a.m.•63 views

CVE-2024-12945

CVE-2024-12945 affects Code-Projects Simple Car Rental System 1.0. The vulnerability is in the /account.php file, where manipulation of the email/pass parameter leads to SQL injection. The issue is exploitable remotely and has been publicly disclosed. Connected documentation corroborates a critic...

9.8CVSS7.6AI score0.00649EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2024/12/26 9:31 a.m.•48 views

CVE-2024-12945 code-projects Simple Car Rental System account.php sql injection

A vulnerability classified as critical was found in code-projects Simple Car Rental System 1.0. This vulnerability affects unknown code of the file /account.php. The manipulation of the argument email/pass leads to sql injection. The attack can be initiated remotely. The exploit has been disclose...

7.5CVSS0.00649EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/26 12:00 a.m.•3 views

CVE-2024-12945: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in code-projects Simple Car Rental System 1.0. This vulnerability affects unknown code of the file /account.php. The manipulation of the argument email/pass leads to sql injection. The attack can be initiated remotely. The exploit has been disclose...

9.8CVSS5.5AI score0.00649EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/12/22 6:31 a.m.•14 views

CVE-2024-12891 code-projects Online Exam Mastering System account.php sql injection

A vulnerability classified as critical has been found in code-projects Online Exam Mastering System 1.0. Affected is an unknown function of the file /account.php?q=quiz&step=2. The manipulation of the argument eid leads to sql injection. It is possible to launch the attack remotely. The exploit h...

6.5CVSS7.4AI score0.00545EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2024/12/22 6:31 a.m.•34 views

CVE-2024-12891 code-projects Online Exam Mastering System account.php sql injection

A vulnerability classified as critical has been found in code-projects Online Exam Mastering System 1.0. Affected is an unknown function of the file /account.php?q=quiz&step=2. The manipulation of the argument eid leads to sql injection. It is possible to launch the attack remotely. The exploit h...

6.5CVSS0.00545EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/22 12:00 a.m.•1 views

CVE-2024-12892: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in code-projects Online Exam Mastering System 1.0. Affected by this vulnerability is an unknown functionality of the file /sign.php?q=account.php. The manipulation of the argument name/gender/college leads to cross site scripting. The attack can...

5.4CVSS3.9AI score0.00389EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/22 12:00 a.m.•2 views

CVE-2024-12891: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in code-projects Online Exam Mastering System 1.0. Affected is an unknown function of the file /account.php?q=quiz&step=2. The manipulation of the argument eid leads to sql injection. It is possible to launch the attack remotely. The exploit h...

8.8CVSS5.5AI score0.00545EPSS
SaveExploits1References1
OSV
OSV
•added 2024/11/26 12:15 a.m.•15 views

CVE-2024-11674

A vulnerability, which was classified as critical, was found in CodeAstro Hospital Management System 1.0. Affected is an unknown function of the file /backend/doc/hisdocupdate-account.php. The manipulation of the argument docdpic leads to unrestricted upload. It is possible to launch the attack...

8.8CVSS5.5AI score0.00614EPSS
SaveExploits1References5
Rows per page
Query Builder