Lucene search
K

32 matches found

CVE
CVE
added 2026/05/24 1:15 p.m.9 views

CVE-2026-9383

The CVE affects itsourcecode Electronic Judging System 1.0. The vulnerability exists in /intrams/admin/login.php where manipulation of the Username parameter enables SQL injection. This allows remote exploitation, as stated. The exploit is public. No additional remediation details are provided in...

7.5CVSS6.8AI score0.00039EPSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2026/02/06 3:32 p.m.2 views

CVE-2026-2057

A vulnerability was detected in SourceCodester Medical Center Portal Management System 1.0. This affects an unknown function of the file /login.php. The manipulation of the argument User results in sql injection. The attack can be executed remotely. The exploit is now public and may be used...

9.8CVSS5.5AI score0.00039EPSS
Exploits1References5Affected Software1
CVE
CVE
added 2025/12/02 12:0 a.m.3 views

CVE-2025-65881

CVE-2025-65881 affects Sourcecodester Zoo Management System v1.0, with a stored/reflected Cross Site Scripting (XSS) flaw in the /classes/Login.php endpoint. The connected sources consistently identify the vulnerability as an XSS issue tied to that login script; no other product versions or compo...

6.1CVSS5.8AI score0.00039EPSS
Exploits1References2Affected Software1
CNNVD
CNNVD
added 2025/10/08 12:0 a.m.1 views

itsourcecode Student Transcript Processing System SQL注入漏洞

itsourcecode Student Transcript Processing System is itsourcecode open source a student transcript processing system. A SQL injection vulnerability exists in version 1.0 of itsourcecode Student Transcript Processing System, which stems from an incorrect manipulation of the parameter uname in the...

9.8CVSS7.7AI score0.00042EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2008-7050

Malware in sbrugna...

7.5CVSS6.4AI score0.03906EPSS
Exploits1References16
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-23278

Malicious code in bioql PyPI...

6.1CVSS6.6AI score0.00475EPSS
Exploits1References3
OSV
OSV
added 2025/09/09 2:15 a.m.2 views

CVE-2025-10118

A security vulnerability has been detected in itsourcecode E-Logbook with Health Monitoring System for COVID-19 1.0. The affected element is an unknown function of the file /login.php. The manipulation of the argument Username leads to sql injection. The attack is possible to be carried out...

9.8CVSS5.7AI score
Exploits0References5
CNNVD
CNNVD
added 2025/08/29 12:0 a.m.1 views

Code-Projects Simple Grading System 安全漏洞

Simple Grading System is a simple grading system. Simple Grading System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the file /login.php. An attacker can exploit this vulnerability to execute illegal SQL commands to steal...

9.8CVSS8.1AI score0.00066EPSS
Exploits1References7
OSV
OSV
added 2025/07/28 2:15 p.m.0 views

CVE-2025-27724

A privilege escalation vulnerability exists in the login.php functionality of meddream MedDream PACS Premium 7.3.3.840. A specially crafted .php file can lead to elevated capabilities. An attacker can upload a malicious file to trigger this vulnerability...

9.8CVSS5.8AI score0.00265EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2025/07/21 12:32 p.m.4 views

CVE-2025-7925 PHPGurukul Online Banquet Booking System login.php cross site scripting

A vulnerability, which was classified as problematic, has been found in PHPGurukul Online Banquet Booking System 1.0. Affected by this issue is some unknown functionality of the file /admin/login.php. The manipulation of the argument userlogin/userpassword leads to cross site scripting. The attac...

5.3CVSS4.3AI score0.00298EPSS
Exploits1References7
Positive Technologies
Positive Technologies
added 2025/07/19 12:0 a.m.1 views

PT-2025-30139 · Unknown · Church Donation System

Name of the Vulnerable Software and Affected Versions: Church Donation System version 1.0 Description: A vulnerability exists in Church Donation System 1.0. The issue is a SQL injection affecting an unknown functionality of the file /login.php. Manipulation of the Username argument can lead to...

9.8CVSS7.4AI score0.00204EPSS
Exploits1References11
Cvelist
Cvelist
added 2025/06/06 3:31 a.m.12 views

CVE-2025-5716 SourceCodester Open Source Clinic Management System login.php sql injection

A vulnerability classified as critical has been found in SourceCodester Open Source Clinic Management System 1.0. Affected is an unknown function of the file /login.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has be...

7.5CVSS0.0015EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/06/04 12:0 a.m.3 views

PT-2025-23787 · Unknown · Codeastro Real Estate Management System

Name of the Vulnerable Software and Affected Versions: CodeAstro Real Estate Management System version 1.0 Description: A critical issue has been found in the system, affecting an unknown part of the file /login.php. The manipulation of the email argument leads to SQL injection. It is possible to...

9.8CVSS7.7AI score0.00277EPSS
Exploits1References11
Positive Technologies
Positive Technologies
added 2025/05/27 12:0 a.m.2 views

PT-2025-22945 · Unknown · Phpgurukul Student Record System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Student Record System version 3.20 Description: A critical vulnerability was found in the PHPGurukul Student Record System, affecting the file /login.php. The manipulation of the ID argument leads to SQL injection. The attack can b...

9.8CVSS7.6AI score0.00204EPSS
Exploits1References11
Cvelist
Cvelist
added 2025/05/01 7:0 p.m.14 views

CVE-2025-4174 PHPGurukul COVID19 Testing Management System login.php sql injection

A vulnerability, which was classified as critical, has been found in PHPGurukul COVID19 Testing Management System 1.0. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument Username leads to sql injection. The attack may be launched remotely...

7.5CVSS0.00277EPSS
Exploits1References5
Cvelist
Cvelist
added 2024/12/21 2:0 p.m.15 views

CVE-2024-12884 Codezips E-Commerce Website login.php sql injection

A vulnerability was found in Codezips E-Commerce Website 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has been...

7.5CVSS0.00087EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2024/07/09 12:0 a.m.2 views

PT-2024-27800 · Unknown · Itsourcode Online Discussion Forum Project In Php With Source Code

Name of the Vulnerable Software and Affected Versions: Itsourcecode Online Discussion Forum Project in PHP with Source Code version 1.0 Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the email parameter in the "login.php" file...

8.2CVSS8.1AI score0.00095EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2024/03/20 5:0 a.m.21 views

CVE-2024-2673 Campcodes Online Job Finder System login.php sql injection

A vulnerability classified as critical has been found in Campcodes Online Job Finder System 1.0. This affects an unknown part of the file /admin/login.php. The manipulation of the argument useremail leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

6.5CVSS7.4AI score0.00054EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2024/01/12 10:31 p.m.1 views

CVE-2024-0474 code-projects Dormitory Management System login.php sql injection

A vulnerability classified as critical was found in code-projects Dormitory Management System 1.0. Affected by this vulnerability is an unknown functionality of the file login.php. The manipulation of the argument username leads to sql injection. The attack can be launched remotely. The exploit h...

7.5CVSS7.7AI score0.00044EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/01/07 12:0 a.m.2 views

Hospital Management System SQL注入漏洞

A Hospital Management System HMS is a computerized system that helps manage healthcare-related information and helps healthcare providers do their jobs effectively. A SQL injection vulnerability exists in Hospital Management System version 1.0, which stems from a lack of validation of externally...

9.8CVSS7.9AI score0.00053EPSS
Exploits0References4
Rows per page
Query Builder