CVE-2026-86168 code-projects Content Management System login.php sql injection

A security flaw has been discovered in code-projects Content Management System 1.0. The affected element is an unknown function of the file /login.php. The manipulation of the argument username results in sql injection. The attack can be executed remotely. The exploit has been released to the...

CVE-2026-86168 code-projects Content Management System login.php sql injection

A security flaw has been discovered in code-projects Content Management System 1.0. The affected element is an unknown function of the file /login.php. The manipulation of the argument username results in sql injection. The attack can be executed remotely. The exploit has been released to the...

CVE-2026-86168

A SQL injection vulnerability exists in code-projects Content Management System 1.0 , specifically in the user_name parameter of the /login.php file. The flaw can be exploited remotely without authentication , resulting in partial impact to confidentiality, integrity, and availability (CVSS 3.1 s...

EUVD-2026-72056

A security flaw has been discovered in code-projects Content Management System 1.0. The affected element is an unknown function of the file /login.php. The manipulation of the argument username results in sql injection. The attack can be executed remotely. The exploit has been released to the...

Exploit for CVE-2026-59346

CVE-2026-59346 Donate Help maintain this p...

CVE-2026-86166

A vulnerability was determined in Tenda HG10 300001138. This issue affects the function formWanRedirect of the file /boaform/formWanRedirect of the component Boa Web Server. Executing a manipulation of the argument if can lead to buffer overflow. The attack may be launched remotely. The exploit h...

CVE-2026-86164

A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/transview.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit has been released to the public...

CVE-2026-86163

A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This impacts an unknown function of the file /pages/prodel.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit is publicly available and might...

CVE-2026-86165 Tenda HG10 formURL buffer overflow

A vulnerability was found in Tenda HG10 300001138. This vulnerability affects the function formURL of the file /boaform/admin/formURL. Performing a manipulation of the argument Keywd/urlFQDN results in buffer overflow. The attack may be initiated remotely. The exploit has been made public and cou...

EUVD-2026-72049

A vulnerability was found in Tenda HG10 300001138. This vulnerability affects the function formURL of the file /boaform/admin/formURL. Performing a manipulation of the argument Keywd/urlFQDN results in buffer overflow. The attack may be initiated remotely. The exploit has been made public and cou...

CVE-2026-86165

CVE-2026-86165 is a buffer overflow in the formURL function of /boaform/admin/formURL on the Tenda HG10 router (firmware 300001138 ). Manipulating the Keywd/urlFQDN argument triggers the overflow, exploitable remotely without authentication . The base CVSS 3.1 score is 9.8 (CRITICAL) . A proof-of...

CVE-2026-86159

A flaw has been found in SourceCodester Online Voting System 1.0. Impacted is an unknown function of the file /ajax.php?action=saveuser. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used...

CVE-2026-86160

A vulnerability has been found in SourceCodester Online Voting System 1.0. The affected element is an unknown function of the file /ajax.php?action=deletevoting. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the...

CVE-2026-86163 itsourcecode Sales and Inventory System pro_del.php sql injection

A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This impacts an unknown function of the file /pages/prodel.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit is publicly available and might...

CVE-2026-86163

itsourcecode Sales and Inventory System 1.0 contains a SQL injection vulnerability in the file /pages/pro_del.php , triggered by manipulation of the ID argument. The attack is exploitable remotely and requires low privileges with no user interaction. The base CVSS 3.1 score is 6.3 (MEDIUM) with l...

EUVD-2026-72047

A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This impacts an unknown function of the file /pages/prodel.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit is publicly available and might...

CVE-2026-86163 itsourcecode Sales and Inventory System pro_del.php sql injection

A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This impacts an unknown function of the file /pages/prodel.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit is publicly available and might...

EUVD-2026-72046

A vulnerability was determined in SourceCodester Online Voting System 1.0. This affects an unknown function of the file /ajax.php?action=login. Executing a manipulation of the argument Username can lead to sql injection. The attack can be executed remotely. The exploit has been publicly disclosed...

CVE-2026-86161

SourceCodester Online Voting System 1.0 is vulnerable to SQL injection in the file /ajax.php?action=delete_category via manipulation of the ID argument. The vulnerability is remotely exploitable without authentication or user interaction. The exploit has been made public at a proof-of-concept mat...

EUVD-2026-72045

A vulnerability was found in SourceCodester Online Voting System 1.0. The impacted element is an unknown function of the file /ajax.php?action=deletecategory. Performing a manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit has been...