EUVD-2026-110507

A vulnerability was detected in SourceCodester Online Food Ordering System 1.0. This issue affects the function unlink of the file admin/delete.php. Performing a manipulation of the argument imagename results in path traversal. The attack is possible to be carried out remotely. The exploit is now...

CVE-2026-116602

A vulnerability was detected in SourceCodester Online Food Ordering System 1.0. This issue affects the function unlink of the file admin/delete.php. Performing a manipulation of the argument imagename results in path traversal. The attack is possible to be carried out remotely. The exploit is now...

CVE-2026-116602 SourceCodester Online Food Ordering System delete.php unlink path traversal

A vulnerability was detected in SourceCodester Online Food Ordering System 1.0. This issue affects the function unlink of the file admin/delete.php. Performing a manipulation of the argument imagename results in path traversal. The attack is possible to be carried out remotely. The exploit is now...

CVE-2026-116602

A path traversal vulnerability exists in SourceCodester Online Food Ordering System 1.0 . The issue is located within the unlink function of the admin/delete.php file, where manipulation of the image_name argument allows for remote path traversal. The impact includes potential unauthorized file d...

CVE-2026-116602 SourceCodester Online Food Ordering System delete.php unlink path traversal

A vulnerability was detected in SourceCodester Online Food Ordering System 1.0. This issue affects the function unlink of the file admin/delete.php. Performing a manipulation of the argument imagename results in path traversal. The attack is possible to be carried out remotely. The exploit is now...

SourceCodester Online Food Ordering System path traversal vulnerability

The SourceCodester Online Food Ordering System version 1.0 contains a path traversal vulnerability. This vulnerability stems from improper handling of the imagename parameter in the admin/delete.php file, potentially enabling path traversal attacks...

EUVD-2026-107667

A vulnerability was identified in oretnom23 php-travel-agency-system. This affects an unknown part of the file admin/delete.php. The manipulation of the argument costomerid/ticketid/paymentid/id/documentid/salaryid/empid/userid leads to sql injection. The attack can be initiated remotely. The...

CVE-2026-114440

A vulnerability was identified in oretnom23 php-travel-agency-system. This affects an unknown part of the file admin/delete.php. The manipulation of the argument costomerid/ticketid/paymentid/id/documentid/salaryid/empid/userid leads to sql injection. The attack can be initiated remotely. The...

CVE-2026-114440

A SQL injection vulnerability exists in the oretnom23 php-travel-agency-system within the admin/delete.php file. Attackers can initiate a remote attack by manipulating the costomer_id , ticket_id , payment_id , id , document_id , salary_id , emp_id , or user_id arguments. While the exploit is pub...

CVE-2026-114440 oretnom23 php-travel-agency-system delete.php sql injection

A vulnerability was identified in oretnom23 php-travel-agency-system. This affects an unknown part of the file admin/delete.php. The manipulation of the argument costomerid/ticketid/paymentid/id/documentid/salaryid/empid/userid leads to sql injection. The attack can be initiated remotely. The...

CVE-2026-114440 oretnom23 php-travel-agency-system delete.php sql injection

A vulnerability was identified in oretnom23 php-travel-agency-system. This affects an unknown part of the file admin/delete.php. The manipulation of the argument costomerid/ticketid/paymentid/id/documentid/salaryid/empid/userid leads to sql injection. The attack can be initiated remotely. The...

CVE-2026-114440 oretnom23 php-travel-agency-system delete.php sql injection

A vulnerability was identified in oretnom23 php-travel-agency-system. This affects an unknown part of the file admin/delete.php. The manipulation of the argument costomerid/ticketid/paymentid/id/documentid/salaryid/empid/userid leads to sql injection. The attack can be initiated remotely. The...

PT-2026-120843

A vulnerability was identified in oretnom23 php-travel-agency-system. This affects an unknown part of the file admin/delete.php. The manipulation of the argument costomer id/ticket id/payment id/id/document id/salary id/emp id/user id leads to sql injection. The attack can be initiated remotely...

oretnom23 php-travel-agency-system input validation error vulnerability

The oretnom23 php-travel-agency-system contains a security vulnerability stemming from improper handling of parameters costomerid/ticketid/paymentid/id/documentid/salaryid/empid/userid in the file admin/delete.php. This may lead to SQL injection attacks...

CVE-2026-0565: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in code-projects Content Management System 1.0. This issue affects some unknown processing of the file /admin/delete.php. Executing a manipulation of the argument del can lead to sql injection. The attack can be executed remotely. The exploit has been made available...

EUVD-2022-39437

Malicious code in bioql PyPI...

CVE-2025-3310: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in code-projects Blood Bank Management System 1.0. This affects an unknown part of the file /admin/delete.php. The manipulation of the argument Search leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

PT-2022-23595 · Unknown · Library Management System

Name of the Vulnerable Software and Affected Versions: Library Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the bookId parameter at the "/admin/delete.php" API endpoint. Recommendations: For Library...

CVE-2022-36735: Improper Neutralization of Special Elements used in an SQL Command

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at /admin/delete.php...

PT-2021-10283

Name of the Vulnerable Software and Affected Versions: Online Book Store version 1.0 Description: The issue allows a remote malicious user to execute arbitrary code via SQL Injection in the bookisbn parameter to the "admin delete.php" API endpoint. This could potentially lead to unauthorized acce...