Lucene search
+L

251 matches found

Positive Technologies
Positive Technologies
•added 2026/03/23 12:00 a.m.•13 views

PT-2026-27063

A vulnerability was found in code-projects Exam Form Submission 1.0. The affected element is an unknown function of the file /admin/update s4.php. Performing a manipulation of the argument sname results in cross site scripting. The attack may be initiated remotely. The exploit has been made publi...

4.8CVSS4.2AI score0.0035EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/03/23 12:00 a.m.•26 views

PT-2026-27194

A vulnerability was determined in code-projects Exam Form Submission 1.0. This vulnerability affects unknown code of the file /admin/update s6.php. Executing a manipulation of the argument sname can lead to cross site scripting. The attack can be launched remotely. The exploit has been publicly...

4.8CVSS4.1AI score0.0035EPSS
SaveExploits0References6
attackerkb
attackerkb
•added 2026/03/22 5:29 p.m.•5 views

CVE-2026-4557

A vulnerability was detected in code-projects Exam Form Submission 1.0. This impacts an unknown function of the file /admin/updates1.php. Performing a manipulation of the argument sname results in cross site scripting. The attack may be initiated remotely. The exploit is now public and may be use...

5.3CVSS4.3AI score0.00449EPSS
SaveExploits0References5Affected Software1
CVE
CVE
•added 2026/03/22 5:29 p.m.•25 views

CVE-2026-4557

Affected software: code-projects Exam Form Submission 1.0. Vulnerable component: /admin/update_s1.php. Root cause: manipulation of the sname argument leads to cross-site scripting (XSS). Impact: potential remote exploitation; exploit is public. Remediation/versions: no fix version or remediation ...

5.3CVSS4.3AI score0.00449EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/03/22 12:00 a.m.•23 views

PT-2026-27032

A vulnerability was detected in code-projects Exam Form Submission 1.0. This impacts an unknown function of the file /admin/update s1.php. Performing a manipulation of the argument sname results in cross site scripting. The attack may be initiated remotely. The exploit is now public and may be us...

5.3CVSS4.3AI score0.00449EPSS
SaveExploits0References8
CVE
CVE
•added 2026/03/20 6:02 a.m.•35 views

CVE-2026-4474

The CVE-2026-4474 entry concerns itsourcecode University Management System 1.0. The vulnerability lies in the admin_single_student_update.php function, where manipulation of the st_name argument enables cross-site scripting (XSS). The attack can be initiated remotely and exploit code has been pub...

6.1CVSS4.2AI score0.00368EPSS
SaveExploits1References5Affected Software1
attackerkb
attackerkb
•added 2026/03/20 6:02 a.m.•6 views

CVE-2026-4474

A flaw has been found in itsourcecode University Management System 1.0. Impacted is an unknown function of the file /adminsinglestudentupdate.php. This manipulation of the argument stname causes cross site scripting. The attack may be initiated remotely. The exploit has been published and may be...

4.8CVSS4.2AI score0.00368EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2026/03/20 6:02 a.m.•9 views

CVE-2026-4474 itsourcecode University Management System admin_single_student_update.php cross site scripting

A flaw has been found in itsourcecode University Management System 1.0. Impacted is an unknown function of the file /adminsinglestudentupdate.php. This manipulation of the argument stname causes cross site scripting. The attack may be initiated remotely. The exploit has been published and may be...

4.8CVSS4.2AI score0.00368EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2026/03/20 12:00 a.m.•20 views

PT-2026-26567

A flaw has been found in itsourcecode University Management System 1.0. Impacted is an unknown function of the file /admin single student update.php. This manipulation of the argument st name causes cross site scripting. The attack may be initiated remotely. The exploit has been published and may...

4.8CVSS4.2AI score0.00368EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2026/03/08 6:02 a.m.•41 views

CVE-2026-3711 code-projects Simple Flight Ticket Booking System Adminupdate.php sql injection

A vulnerability was detected in code-projects Simple Flight Ticket Booking System 1.0. Affected is an unknown function of the file /Adminupdate.php. The manipulation of the argument flightno/airplaneid/departure/dtime/arrival/atime/ec/ep/bc/bp results in sql injection. The attack can be executed...

5.8CVSS0.00483EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2026/03/08 12:00 a.m.•14 views

PT-2026-23920

A vulnerability was detected in code-projects Simple Flight Ticket Booking System 1.0. Affected is an unknown function of the file /Adminupdate.php. The manipulation of the argument flightno/airplaneid/departure/dtime/arrival/atime/ec/ep/bc/bp results in sql injection. The attack can be executed...

5.8CVSS5.8AI score0.00483EPSS
SaveExploits1References7
attackerkb
attackerkb
•added 2026/03/02 5:02 a.m.•10 views

CVE-2026-3411

A security vulnerability has been detected in itsourcecode University Management System 1.0. Affected by this issue is some unknown functionality of the file /adminsinglestudentupdate.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. T...

9.8CVSS6.8AI score0.00572EPSS
SaveExploits1References5Affected Software1
CVE
CVE
•added 2026/03/02 5:02 a.m.•35 views

CVE-2026-3411

The CVE-2026-3411 entry concerns itsourcecode University Management System 1.0. The vulnerability is a SQL injection in the /admin_single_student_update.php function, exploitable by manipulating the ID parameter. Remote exploitation is possible, and public exploits have been disclosed. According ...

9.8CVSS6.8AI score0.00572EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2026/03/02 5:02 a.m.•42 views

CVE-2026-3411 itsourcecode University Management System admin_single_student_update.php sql injection

A security vulnerability has been detected in itsourcecode University Management System 1.0. Affected by this issue is some unknown functionality of the file /adminsinglestudentupdate.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. T...

7.5CVSS0.00572EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2026/02/22 12:00 a.m.•14 views

PT-2026-21421

A weakness has been identified in YiFang CMS up to 2.0.5. This affects the function update of the file app/db/admin/D adManage.php of the component Extended Management Module. Executing a manipulation of the argument Name can lead to cross site scripting. The attack may be performed from remote...

4.8CVSS3AI score0.00362EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2026/02/09 7:14 a.m.•14 views

CVE-2026-2132

A security flaw has been discovered in code-projects Online Music Site 1.0. This issue affects some unknown processing of the file /Administrator/PHP/AdminUpdateCategory.php. The manipulation of the argument txtcat results in sql injection. The attack can be executed remotely. The exploit has bee...

9.8CVSS5.5AI score0.00343EPSS
SaveExploits1References1
OSV
OSV
•added 2026/02/08 4:15 a.m.•17 views

CVE-2026-2133

A weakness has been identified in code-projects Online Music Site 1.0. Impacted is an unknown function of the file /Administrator/PHP/AdminUpdateCategory.php. This manipulation of the argument txtimage causes unrestricted upload. The attack is possible to be carried out remotely. The exploit has...

9.8CVSS5.5AI score0.00443EPSS
SaveExploits1References5
NVD
NVD
•added 2026/02/08 4:15 a.m.•24 views

CVE-2026-2133

A weakness has been identified in code-projects Online Music Site 1.0. Impacted is an unknown function of the file /Administrator/PHP/AdminUpdateCategory.php. This manipulation of the argument txtimage causes unrestricted upload. The attack is possible to be carried out remotely. The exploit has...

9.8CVSS0.00443EPSS
SaveExploits1References5
NVD
NVD
•added 2026/02/08 4:15 a.m.•26 views

CVE-2026-2132

A security flaw has been discovered in code-projects Online Music Site 1.0. This issue affects some unknown processing of the file /Administrator/PHP/AdminUpdateCategory.php. The manipulation of the argument txtcat results in sql injection. The attack can be executed remotely. The exploit has bee...

9.8CVSS0.00343EPSS
SaveExploits1References5
OSV
OSV
•added 2026/02/08 4:15 a.m.•14 views

CVE-2026-2132

A security flaw has been discovered in code-projects Online Music Site 1.0. This issue affects some unknown processing of the file /Administrator/PHP/AdminUpdateCategory.php. The manipulation of the argument txtcat results in sql injection. The attack can be executed remotely. The exploit has bee...

9.8CVSS5.8AI score0.00343EPSS
SaveExploits1References5
Rows per page
Query Builder