Lucene search
K

92704 matches found

ATTACKERKB
ATTACKERKB
added 2026/04/05 4:30 p.m.3 views

CVE-2026-5583

A security vulnerability has been detected in PHPGurukul Online Shopping Portal Project 2.1. This affects an unknown part of the file /my-profile.php of the component Parameter Handler. The manipulation of the argument fullname leads to sql injection. It is possible to initiate the attack remotel...

6.5CVSS6.5AI score0.00012EPSS
Exploits0References5Affected Software1
NVD
NVD
added 2026/04/05 12:16 p.m.1 views

CVE-2026-5564

A weakness has been identified in code-projects Simple Laundry System 1.0. Affected by this vulnerability is an unknown functionality of the file /searchguest.php of the component Parameter Handler. This manipulation of the argument searchServiceId causes sql injection. The attack may be initiate...

7.5CVSS0.00043EPSS
Exploits0References5
Cvelist
Cvelist
added 2026/04/05 12:0 p.m.21 views

CVE-2026-5565 code-projects Simple Laundry System Parameter delmemberinfo.php sql injection

A security vulnerability has been detected in code-projects Simple Laundry System 1.0. Affected by this issue is some unknown functionality of the file /delmemberinfo.php of the component Parameter Handler. Such manipulation of the argument userid leads to sql injection. The attack may be launche...

7.5CVSS0.00043EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2026/04/05 10:30 a.m.1 views

CVE-2026-5560 PHPGurukul Online Shopping Portal Project Parameter payment-method.php sql injection

A vulnerability was found in PHPGurukul Online Shopping Portal Project 2.1. The impacted element is an unknown function of the file /payment-method.php of the component Parameter Handler. Performing a manipulation of the argument paymethod results in sql injection. It is possible to initiate the...

6.5CVSS6.4AI score0.00012EPSS
Exploits0References5
NVD
NVD
added 2026/04/05 10:16 a.m.0 views

CVE-2026-5555

A weakness has been identified in code-projects Concert Ticket Reservation System 1.0. This affects an unknown part of the file /ConcertTicketReservationSystem-master/login.php of the component Parameter Handler. Executing a manipulation of the argument Email can lead to sql injection. The attack...

7.5CVSS0.00043EPSS
Exploits0References5
NVD
NVD
added 2026/04/05 9:16 a.m.0 views

CVE-2026-5552

A weakness has been identified in PHPGurukul Online Shopping Portal Project 2.1. This issue affects some unknown processing of the file /sub-category.php of the component Parameter Handler. This manipulation of the argument pid causes sql injection. Remote exploitation of the attack is possible...

6.5CVSS0.00012EPSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2026/04/05 9:15 a.m.1 views

CVE-2026-5555

A weakness has been identified in code-projects Concert Ticket Reservation System 1.0. This affects an unknown part of the file /ConcertTicketReservationSystem-master/login.php of the component Parameter Handler. Executing a manipulation of the argument Email can lead to sql injection. The attack...

7.5CVSS5.8AI score0.00043EPSS
Exploits0References5Affected Software1
CVE
CVE
added 2026/04/05 9:15 a.m.4 views

CVE-2026-5555

The CVE-2026-5555 entry concerns code-projects Concert Ticket Reservation System 1.0, specifically an issue in the login.php file under the Parameter Handler. The vulnerability stems from manipulating the Email argument, enabling SQL injection. It is described as exploitable remotely and with a p...

7.5CVSS6.9AI score0.00043EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2026/04/05 8:45 a.m.1 views

CVE-2026-5553 itsourcecode Online Cellphone System Parameter available.php sql injection

A vulnerability was identified in itsourcecode Online Cellphone System 1.0. Affected by this vulnerability is an unknown functionality of the file /cp/available.php of the component Parameter Handler. Such manipulation of the argument Name leads to sql injection. The attack can be launched...

6.5CVSS6.5AI score0.00012EPSS
Exploits0References5
CVE
CVE
added 2026/04/05 8:30 a.m.7 views

CVE-2026-5552

CVE-2026-5552 concerns a SQL injection in PHPGurukul Online Shopping Portal Project 2.1. The issue is tied to the Parameter Handler component, specifically the file /sub-category.php where manipulation of the pid argument enables SQL injection. Remote exploitation is described as possible, and pu...

6.5CVSS6.4AI score0.00012EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2026/04/05 8:30 a.m.2 views

CVE-2026-5552 PHPGurukul Online Shopping Portal Project Parameter sub-category.php sql injection

A weakness has been identified in PHPGurukul Online Shopping Portal Project 2.1. This issue affects some unknown processing of the file /sub-category.php of the component Parameter Handler. This manipulation of the argument pid causes sql injection. Remote exploitation of the attack is possible...

6.5CVSS6.4AI score0.00012EPSS
Exploits0References5
NVD
NVD
added 2026/04/05 5:16 a.m.1 views

CVE-2026-5540

A vulnerability has been found in code-projects Simple Laundry System 1.0. This vulnerability affects unknown code of the file /modifymember.php of the component Parameter Handler. Such manipulation of the argument firstName leads to sql injection. The attack can be launched remotely. The exploit...

7.5CVSS0.00043EPSS
Exploits0References5
NVD
NVD
added 2026/04/05 4:16 a.m.1 views

CVE-2026-5539

A flaw has been found in code-projects Simple Laundry System 1.0. This affects an unknown part of the file /modifymember.php of the component Parameter Handler. This manipulation of the argument firstName causes cross site scripting. The attack can be initiated remotely. The exploit has been...

5.3CVSS0.00039EPSS
Exploits0References5
NVD
NVD
added 2026/04/05 4:16 a.m.3 views

CVE-2026-5537

A security vulnerability has been detected in halex CourseSEL up to 1.1.0. Affected by this vulnerability is the function checksel of the file Apps/Index/Controller/IndexController.class.php of the component HTTP GET Parameter Handler. The manipulation of the argument seid leads to sql injection...

6.5CVSS0.00011EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2026/04/05 3:45 a.m.1 views

CVE-2026-5540

A vulnerability has been found in code-projects Simple Laundry System 1.0. This vulnerability affects unknown code of the file /modifymember.php of the component Parameter Handler. Such manipulation of the argument firstName leads to sql injection. The attack can be launched remotely. The exploit...

7.5CVSS5.8AI score0.00043EPSS
Exploits0References5Affected Software1
CVE
CVE
added 2026/04/05 3:30 a.m.8 views

CVE-2026-5539

CVE-2026-5539 affects code-projects’ Simple Laundry System 1.0, specifically an issue in the Parameter Handler’s /modifymember.php. Manipulation of the firstName argument enables cross-site scripting (XSS). The vulnerability can be triggered remotely, and an exploit has been published. The provid...

5.3CVSS4.4AI score0.00039EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2026/04/05 12:0 a.m.2 views

PT-2026-30422

A weakness has been identified in PHPGurukul Online Shopping Portal Project 2.1. This issue affects some unknown processing of the file /sub-category.php of the component Parameter Handler. This manipulation of the argument pid causes sql injection. Remote exploitation of the attack is possible...

6.5CVSS5.7AI score0.00012EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2026/04/05 12:0 a.m.10 views

PT-2026-30482

UniSharp Laravel File Manager v2.0.0-alpha7 and v2.0 contain an arbitrary file upload vulnerability that allows authenticated attackers to upload malicious files by sending multipart form data to the upload endpoint. Attackers can upload PHP files with the type parameter set to Files and execute...

8.8CVSS6.3AI score0.00077EPSS
Exploits0References5
CNNVD
CNNVD
added 2026/04/05 12:0 a.m.3 views

Code-Projects Simple Laundry System 代码注入漏洞

Code-Projects Simple Laundry System is an open-source system developed by Code-Projects, designed for managing laundry shop operations. It offers features such as order management, customer management, and inventory management. Version 1.0 of Code-Projects Simple Laundry System contains a code...

5.3CVSS5.7AI score0.00013EPSS
Exploits0References5
CNNVD
CNNVD
added 2026/04/05 12:0 a.m.6 views

itsourcecode Online Enrollment System SQL注入漏洞

itsourcecode Online Enrollment System is an open-source online registration system developed by itsourcecode. Version 1.0 of the itsourcecode Online Enrollment System has a SQL injection vulnerability. This vulnerability arises from incorrect handling of the USERID parameter in the...

7.5CVSS7.2AI score0.00043EPSS
Exploits0References5
Rows per page
Query Builder