Lucene search
+L

28169 matches found

BDU FSTEC
BDU FSTEC
added 2026/02/09 12:00 a.m.8 views

The vulnerability of the OpenSky flight planning and operational management system, related to the lack of measures to protect the SQL query structure, allows attackers to execute arbitrary SQL queries.

The vulnerability of the OpenSky flight planning and operational management system lies in the lack of measures taken to protect the SQL query structure during the processing of the fileid parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

7.7CVSS6.2AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/02/09 12:00 a.m.11 views

The vulnerability of the OpenSky flight planning and operational management system, related to the lack of measures to protect the SQL query structure, allows attackers to execute arbitrary SQL queries.

The vulnerability of the OpenSky flight planning and operational management system lies in the lack of measures taken to protect the SQL query structure during the processing of the selectmonth parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries...

5.3CVSS6.2AI score
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
added 2026/02/09 12:00 a.m.21 views

PT-2026-7203

Name of the Vulnerable Software and Affected Versions SAP CRM and SAP S/4HANA affected versions not specified Description An authenticated attacker in SAP CRM and SAP S/4HANA Scripting Editor can exploit a flaw in a generic function module call and execute unauthorized critical functionalities...

9.9CVSS6.3AI score0.0049EPSS
SaveExploits0References18
BDU FSTEC
BDU FSTEC
added 2026/02/09 12:00 a.m.24 views

The vulnerability of the OpenSky flight planning and operational management system, related to the lack of measures to protect the SQL query structure, allows attackers to execute arbitrary SQL queries.

The vulnerability of the OpenSky flight planning and operational management system lies in the lack of measures taken to protect the SQL query structure during the processing of the filename parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotel...

7.7CVSS6.2AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/02/09 12:00 a.m.7 views

The vulnerability of the OpenSky flight planning and operational management system, related to the lack of measures to protect the SQL query structure, allows attackers to execute arbitrary SQL queries.

The vulnerability of the OpenSky flight planning and operational management system lies in the lack of measures taken to protect the SQL query structure during the processing of the getLogPlan parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries...

7.7CVSS6.2AI score
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2026/02/09 12:00 a.m.14 views

Code-Projects Online Reviewer System SQL注入漏洞

The Code-Projects Online Reviewer System is an online review system developed by Code-Projects as open source. Version 1.0 of the Code-Projects Online Reviewer System has a SQL injection vulnerability. This vulnerability arises from incorrect handling of parameters with the ID in...

9.8CVSS7.2AI score0.00336EPSS
SaveExploits1References6
Redos
Redos
added 2026/02/09 12:00 a.m.12 views

ROS-20260209-73-0010

Vulnerability in python-xmltodict related to errors in xml query processing. Exploitation of the vulnerability could allow a remote attacker to execute arbitrary code...

6.9CVSS6.2AI score0.00447EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2026/02/09 12:00 a.m.18 views

The vulnerability of the OpenSky flight planning and operational management system, related to the lack of measures to protect the SQL query structure, allows attackers to execute arbitrary SQL queries.

The vulnerability of the OpenSky flight planning and operational management system lies in the lack of measures taken to protect the SQL query structure during the processing of the testid parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

6.8CVSS6.2AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/02/09 12:00 a.m.12 views

The vulnerability of the OpenSky flight planning and operational management system, related to the lack of measures to protect the SQL query structure, allows attackers to execute arbitrary SQL queries.

The vulnerability of the OpenSky flight planning and operational management system lies in the lack of measures taken to protect the SQL query structure during the processing of the TestId parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

6.8CVSS6.2AI score
SaveExploits0Affected Software1
EUVD
EUVD
added 2026/02/08 7:32 p.m.17 views

EUVD-2026-5771

A vulnerability was determined in PHPGurukul Hospital Management System 4.0. This impacts an unknown function of the file /admin/manage-users.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be...

7.2CVSS5.3AI score0.0032EPSS
SaveExploits1References6
ATTACKERKB
ATTACKERKB
added 2026/02/08 7:32 p.m.17 views

CVE-2026-2179

A vulnerability was determined in PHPGurukul Hospital Management System 4.0. This impacts an unknown function of the file /admin/manage-users.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be...

5.8CVSS5.2AI score0.0032EPSS
SaveExploits1References5Affected Software1
NVD
NVD
added 2026/02/08 7:16 p.m.16 views

CVE-2026-2176

A security vulnerability has been detected in code-projects Contact Management System 1.0. This issue affects some unknown processing of the file index.py. Such manipulation of the argument selecteditem0 leads to sql injection. The attack can be executed remotely...

8.8CVSS0.00253EPSS
SaveExploits0References4
CVE
CVE
added 2026/02/08 7:02 p.m.24 views

CVE-2026-2176

CVE-2026-2176 affects code-projects Contact Management System 1.0. The issue is a SQL injection caused by manipulating the argument selecteditem[0] in the file index.py, with remote execution possible. Multiple connected sources corroborate the vulnerability in index.py and its impact, without pr...

8.8CVSS6.5AI score0.00253EPSS
SaveExploits0References4Affected Software1
EUVD
EUVD
added 2026/02/08 7:02 p.m.13 views

EUVD-2026-5774

A security vulnerability has been detected in code-projects Contact Management System 1.0. This issue affects some unknown processing of the file index.py. Such manipulation of the argument selecteditem0 leads to sql injection. The attack can be executed remotely...

8.8CVSS5.4AI score0.00253EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/02/08 6:32 p.m.13 views

EUVD-2026-5777

A vulnerability was identified in code-projects Online Examination System 1.0. Affected by this issue is some unknown functionality of the file login.php. The manipulation of the argument username/password leads to sql injection. The attack may be initiated remotely...

9.8CVSS5.4AI score0.00325EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/02/08 6:02 p.m.16 views

EUVD-2026-5779

A vulnerability was found in code-projects Online Student Management System 1.0. Affected is an unknown function of the file accounts.php of the component Login. Performing a manipulation of the argument username/password results in sql injection. The attack can be initiated remotely. The exploit...

9.8CVSS5.3AI score0.00407EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/02/08 5:02 p.m.17 views

EUVD-2026-5783

A security vulnerability has been detected in code-projects Online Reviewer System 1.0. The affected element is an unknown function of the file /login/index.php of the component Login. The manipulation of the argument username/password leads to sql injection. The attack is possible to be carried...

9.8CVSS5.3AI score0.00432EPSS
SaveExploits1References6
OSV
OSV
added 2026/02/08 4:15 p.m.9 views

CVE-2026-2162

A vulnerability was determined in itsourcecode News Portal Project 1.0. This affects an unknown part of the file /admin/aboutus.php. This manipulation of the argument pagetitle causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized...

7.2CVSS5.7AI score0.0033EPSS
SaveExploits1References5
NVD
NVD
added 2026/02/08 4:15 p.m.19 views

CVE-2026-2162

A vulnerability was determined in itsourcecode News Portal Project 1.0. This affects an unknown part of the file /admin/aboutus.php. This manipulation of the argument pagetitle causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized...

7.2CVSS0.0033EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2026/02/08 4:02 p.m.6 views

CVE-2026-2162 itsourcecode News Portal Project aboutus.php sql injection

A vulnerability was determined in itsourcecode News Portal Project 1.0. This affects an unknown part of the file /admin/aboutus.php. This manipulation of the argument pagetitle causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized...

5.8CVSS5.5AI score0.0033EPSS
SaveExploits1References5
Rows per page
Query Builder