EUVD-2026-67768

xipblog module v2.0.1 and before for PrestaShop allows unauthenticated remote attackers to inject arbitrary JavaScript via the name and content parameters in ajax.php. The input is stored in the database without HTML sanitization and rendered in Smarty templates without output escaping, resulting...

EUVD-2026-66769

A flaw has been found in itsourcecode Payroll System 1.0. The impacted element is the function create/read/update/delete of the file ajax.php of the component CRUD Operation Handler. Executing a manipulation of the argument action can lead to missing authentication. The attack may be performed fr...

CVE-2026-81203

A vulnerability has been found in SourceCodester Simple Online Food Ordering System 1.0. This affects an unknown function of the file /admin/ajax.php?action=login2. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2026-81203 SourceCodester Simple Online Food Ordering System ajax.php login2 sql injection

A vulnerability has been found in SourceCodester Simple Online Food Ordering System 1.0. This affects an unknown function of the file /admin/ajax.php?action=login2. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2026-81203 SourceCodester Simple Online Food Ordering System ajax.php login2 sql injection

A vulnerability has been found in SourceCodester Simple Online Food Ordering System 1.0. This affects an unknown function of the file /admin/ajax.php?action=login2. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2026-81203

A SQL injection vulnerability exists in SourceCodester Simple Online Food Ordering System 1.0 , specifically in the file /admin/ajax.php with the action=login2 parameter. The email argument is not properly sanitized, allowing a remote, unauthenticated attacker to execute arbitrary SQL commands. T...

CVE-2026-81202

A flaw has been found in itsourcecode Payroll System 1.0. The impacted element is the function create/read/update/delete of the file ajax.php of the component CRUD Operation Handler. Executing a manipulation of the argument action can lead to missing authentication. The attack may be performed fr...

CVE-2026-81202 itsourcecode Payroll System CRUD Operation ajax.php delete missing authentication

A flaw has been found in itsourcecode Payroll System 1.0. The impacted element is the function create/read/update/delete of the file ajax.php of the component CRUD Operation Handler. Executing a manipulation of the argument action can lead to missing authentication. The attack may be performed fr...

CVE-2026-81202

A missing authentication flaw in itsourcecode Payroll System 1.0 allows an unauthenticated remote attacker to manipulate the action argument in ajax.php (the CRUD Operation Handler component), bypassing authentication on the create/read/update/delete functions. The vulnerability is scored CVSS 3....

CVE-2026-81202 itsourcecode Payroll System CRUD Operation ajax.php delete missing authentication

A flaw has been found in itsourcecode Payroll System 1.0. The impacted element is the function create/read/update/delete of the file ajax.php of the component CRUD Operation Handler. Executing a manipulation of the argument action can lead to missing authentication. The attack may be performed fr...

PT-2026-82327

Name of the Vulnerable Software and Affected Versions itsourcecode Payroll System version 1.0 Description A flaw in the CRUD Operation Handler component allows remote attackers to bypass authentication. The issue exists within the create/read/update/delete function of the ajax.php file. By...

CVE-2026-81202: Missing Authentication for Critical Function

A flaw has been found in itsourcecode Payroll System 1.0. The impacted element is the function create/read/update/delete of the file ajax.php of the component CRUD Operation Handler. Executing a manipulation of the argument action can lead to missing authentication. The attack may be performed fr...

CVE-2026-81203: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in SourceCodester Simple Online Food Ordering System 1.0. This affects an unknown function of the file /admin/ajax.php?action=login2. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

PT-2026-82341

Name of the Vulnerable Software and Affected Versions SourceCodester Simple Online Food Ordering System version 1.0 Description An issue exists that allows remote attackers to perform SQL injection. This occurs through the manipulation of the email argument within the...

PT-2026-81164

The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 7.3.7.4 via the em options save function. This makes it possible for authenticated attackers, with administrator-level access and above, to...

CVE-2026-78248

A vulnerability was determined in SourceCodester Simple Online Food Ordering System 1.0. Impacted is an unknown function of the file /fos/admin/ajax.php?action=savesettings. This manipulation of the argument Name causes sql injection. The attack is possible to be carried out remotely. The exploit...

CVE-2026-78247

A vulnerability was found in SourceCodester Simple Online Food Ordering System 1.0. This issue affects some unknown processing of the file /fos/admin/ajax.php?action=confirmorder. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has be...

CVE-2026-78248 SourceCodester Simple Online Food Ordering System ajax.php save_settings sql injection

A vulnerability was determined in SourceCodester Simple Online Food Ordering System 1.0. Impacted is an unknown function of the file /fos/admin/ajax.php?action=savesettings. This manipulation of the argument Name causes sql injection. The attack is possible to be carried out remotely. The exploit...

CVE-2026-78248

A SQL injection vulnerability exists in SourceCodester Simple Online Food Ordering System 1.0 , in the file /fos/admin/ajax.php?action=save_settings. The Name argument is susceptible to manipulation, allowing a remote, unauthenticated attacker to inject SQL commands. The exploit has been publicly...

EUVD-2026-64842

A vulnerability was determined in SourceCodester Simple Online Food Ordering System 1.0. Impacted is an unknown function of the file /fos/admin/ajax.php?action=savesettings. This manipulation of the argument Name causes sql injection. The attack is possible to be carried out remotely. The exploit...