CVE-2026-94015

A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the file /drugrecommender/Admin/edituser.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit is publicly available an...

CVE-2026-94015 SourceCodester Drug Recommendation System edit_user.php sql injection

A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the file /drugrecommender/Admin/edituser.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit is publicly available an...

CVE-2026-94015

A SQL injection vulnerability exists in SourceCodester Drug Recommendation System 1.0 , specifically in the file /drug_recommender/Admin/edit_user.php . Manipulating the ID argument allows an unauthenticated, remote attacker to execute arbitrary SQL. The CVSS 3.1 score is 7.3 (HIGH) , reflecting ...

EUVD-2026-83736

A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the file /drugrecommender/Admin/edituser.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit is publicly available an...

CVE-2026-94015 SourceCodester Drug Recommendation System edit_user.php sql injection

A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the file /drugrecommender/Admin/edituser.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit is publicly available an...

CVE-2026-94015: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the file /drugrecommender/Admin/edituser.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit is publicly available an...

CVE-2026-7612 itsourcecode Courier Management System edit_user.php sql injection

A vulnerability was determined in itsourcecode Courier Management System 1.0. Affected is an unknown function of the file /edituser.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclosed and may ...

CVE-2026-7612: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in itsourcecode Courier Management System 1.0. Affected is an unknown function of the file /edituser.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclosed and may ...

CVE-2026-26464: Improper Neutralization of Input During Web Page Generation

Stored Cross-Site Scripting XSS was found in the /admin/edituser.php page of Society Management System Portal V1.0, which allows remote attackers to inject and store arbitrary JavaScript code that is executed in users' browsers. This vulnerability can be exploited via the name parameter in a POST...

CVE-2025-14226

A vulnerability was identified in itsourcecode Student Management System 1.0. This vulnerability affects unknown code of the file /edituser.php. The manipulation of the argument fname leads to sql injection. The attack is possible to be carried out remotely. The exploit is publicly available and...

CVE-2025-14226: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in itsourcecode Student Management System 1.0. This vulnerability affects unknown code of the file /edituser.php. The manipulation of the argument fname leads to sql injection. The attack is possible to be carried out remotely. The exploit is publicly available and...

EUVD-2018-10267

Malware in sbrugna...

CVE-2025-10810: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in Campcodes Online Learning Management System 1.0. The impacted element is an unknown function of the file /admin/edituser.php. Performing manipulation of the argument firstname results in sql injection. The attack is possible to be carried out remotely. The exploit ...

SourceCodester Student Grading System SQL注入漏洞

SourceCodester Student Grading System is a SourceCodester open source student grading system. A SQL injection vulnerability exists in SourceCodester Student Grading System version 1.0, which stems from incorrect manipulation of the parameter ID in the file /edituser.php, which could lead to a SQL...

CVE-2025-10408: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in SourceCodester Student Grading System 1.0. Affected by this issue is some unknown functionality of the file /edituser.php. Performing manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been release...

CVE-2025-8189 Campcodes Courier Management System edit_user.php sql injection

A vulnerability classified as critical was found in Campcodes Courier Management System 1.0. This vulnerability affects unknown code of the file /edituser.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the...

CVE-2025-8189: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in Campcodes Courier Management System 1.0. This vulnerability affects unknown code of the file /edituser.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the...

CVE-2025-7928 code-projects Church Donation System edit_user.php sql injection

A vulnerability was found in code-projects Church Donation System 1.0 and classified as critical. This issue affects some unknown processing of the file /members/edituser.php. The manipulation of the argument firstname leads to sql injection. The attack may be initiated remotely. The exploit has...

CVE-2025-7928: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Church Donation System 1.0 and classified as critical. This issue affects some unknown processing of the file /members/edituser.php. The manipulation of the argument firstname leads to sql injection. The attack may be initiated remotely. The exploit has...

CVE-2025-6842 code-projects Product Inventory System edit_user.php sql injection

A vulnerability was found in code-projects Product Inventory System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/edituser.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been...