Lucene search
+L

11932 matches found

CNNVD
CNNVD
added 2026/03/09 12:00 a.m.14 views

SourceCodester Resort Reservation System 代码问题漏洞

The SourceCodester Resort Reservation System is an open-source resort reservation system developed by SourceCodester. Version 1.0 of the SourceCodester Resort Reservation System has code-related vulnerabilities. These vulnerabilities stem from incorrect handling of parameters in the file...

8.8CVSS6.7AI score0.00299EPSS
SaveExploits1References6
EUVD
EUVD
added 2026/03/08 6:30 p.m.12 views

EUVD-2026-10257

A vulnerability was found in SourceCodester Sales and Inventory System 1.0. This affects an unknown function of the file /addstock.php. Performing a manipulation of the argument cost results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be used...

6.5CVSS6.5AI score0.00301EPSS
SaveExploits1References6
EUVD
EUVD
added 2026/03/08 6:30 p.m.13 views

EUVD-2026-10250

A vulnerability was identified in itsourcecode University Management System 1.0. Affected by this issue is some unknown functionality of the file /addresult.php. Such manipulation of the argument subject leads to sql injection. The attack may be launched remotely. The exploit is publicly availabl...

7.5CVSS7AI score0.00342EPSS
SaveExploits1References6
OSV
OSV
added 2026/03/08 6:15 p.m.8 views

CVE-2026-3754

A vulnerability was found in SourceCodester Sales and Inventory System 1.0. This affects an unknown function of the file /addstock.php. Performing a manipulation of the argument cost results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be used...

8.8CVSS5.8AI score0.00301EPSS
SaveExploits1References5
NVD
NVD
added 2026/03/08 6:15 p.m.6 views

CVE-2026-3754

A vulnerability was found in SourceCodester Sales and Inventory System 1.0. This affects an unknown function of the file /addstock.php. Performing a manipulation of the argument cost results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be used...

8.8CVSS0.00301EPSS
SaveExploits1References5
CVE
CVE
added 2026/03/08 5:32 p.m.24 views

CVE-2026-3754

CVE-2026-3754 affects SourceCodester Sales and Inventory System 1.0. The vulnerability is an SQL injection in the /add_stock.php module, triggered by manipulating the cost argument, with remote exploitation and a publicly available exploit. Multiple feeds consistently describe an unknown function...

8.8CVSS6.5AI score0.00301EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2026/03/08 5:32 p.m.50 views

CVE-2026-3754 SourceCodester Sales and Inventory System add_stock.php sql injection

A vulnerability was found in SourceCodester Sales and Inventory System 1.0. This affects an unknown function of the file /addstock.php. Performing a manipulation of the argument cost results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be used...

6.5CVSS0.00301EPSS
SaveExploits1References5
ATTACKERKB
ATTACKERKB
added 2026/03/08 5:32 p.m.3 views

CVE-2026-3754

A vulnerability was found in SourceCodester Sales and Inventory System 1.0. This affects an unknown function of the file /addstock.php. Performing a manipulation of the argument cost results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be used...

6.5CVSS5.7AI score0.00301EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2026/03/08 5:16 p.m.11 views

CVE-2026-3753

A vulnerability has been found in SourceCodester Sales and Inventory System up to 1.0. The impacted element is an unknown function of the file /addsalesprint.php. Such manipulation of the argument sid leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

8.8CVSS5.7AI score0.00301EPSS
SaveExploits1References5
NVD
NVD
added 2026/03/08 5:16 p.m.10 views

CVE-2026-3753

A vulnerability has been found in SourceCodester Sales and Inventory System up to 1.0. The impacted element is an unknown function of the file /addsalesprint.php. Such manipulation of the argument sid leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

8.8CVSS0.00301EPSS
SaveExploits1References5
ATTACKERKB
ATTACKERKB
added 2026/03/08 5:02 p.m.5 views

CVE-2026-3753

A vulnerability has been found in SourceCodester Sales and Inventory System up to 1.0. The impacted element is an unknown function of the file /addsalesprint.php. Such manipulation of the argument sid leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

6.5CVSS5.7AI score0.00301EPSS
SaveExploits1References5Affected Software1
CVE
CVE
added 2026/03/08 5:02 p.m.27 views

CVE-2026-3753

CVE-2026-3753 affects SourceCodester Sales and Inventory System up to version 1.0. The vulnerability is an SQL injection in the add_sales_print.php file triggered by manipulation of the sid parameter. It enables remote exploitation and has publicly disclosed exploits. Several connected sources co...

8.8CVSS6.5AI score0.00301EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2026/03/08 5:02 p.m.5 views

CVE-2026-3753 SourceCodester Sales and Inventory System add_sales_print.php sql injection

A vulnerability has been found in SourceCodester Sales and Inventory System up to 1.0. The impacted element is an unknown function of the file /addsalesprint.php. Such manipulation of the argument sid leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

6.5CVSS5.7AI score0.00301EPSS
SaveExploits1References5
OSV
OSV
added 2026/03/08 4:16 p.m.11 views

CVE-2026-3747

A vulnerability was identified in itsourcecode University Management System 1.0. Affected by this issue is some unknown functionality of the file /addresult.php. Such manipulation of the argument subject leads to sql injection. The attack may be launched remotely. The exploit is publicly availabl...

9.8CVSS5.8AI score0.00342EPSS
SaveExploits1References5
CVE
CVE
added 2026/03/08 4:02 p.m.35 views

CVE-2026-3747

The CVE-2026-3747 entry concerns itsourcecode University Management System version 1.0. The vulnerability is an SQL injection in the file /add_result.php (subject parameter manipulation) that can be triggered remotely. Public exploitation is noted. Multiple sources corroborate impact on confident...

9.8CVSS7AI score0.00342EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2026/03/08 2:15 p.m.10 views

CVE-2026-3737

A vulnerability was determined in SourceCodester Pet Grooming Management Software 1.0. This affects an unknown part of the file adduser.php of the component User Creation Handler. Executing a manipulation can lead to improper authorization. The attack may be launched remotely. The exploit has bee...

6.3CVSS5.5AI score0.00254EPSS
SaveExploits1References5
NVD
NVD
added 2026/03/08 2:15 p.m.11 views

CVE-2026-3737

A vulnerability was determined in SourceCodester Pet Grooming Management Software 1.0. This affects an unknown part of the file adduser.php of the component User Creation Handler. Executing a manipulation can lead to improper authorization. The attack may be launched remotely. The exploit has bee...

6.5CVSS0.00254EPSS
SaveExploits1References5
ATTACKERKB
ATTACKERKB
added 2026/03/08 1:32 p.m.6 views

CVE-2026-3737

A vulnerability was determined in SourceCodester Pet Grooming Management Software 1.0. This affects an unknown part of the file adduser.php of the component User Creation Handler. Executing a manipulation can lead to improper authorization. The attack may be launched remotely. The exploit has bee...

6.5CVSS5.5AI score0.00254EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2026/03/08 1:32 p.m.6 views

CVE-2026-3737 SourceCodester Pet Grooming Management Software User Creation add_user.php improper authorization

A vulnerability was determined in SourceCodester Pet Grooming Management Software 1.0. This affects an unknown part of the file adduser.php of the component User Creation Handler. Executing a manipulation can lead to improper authorization. The attack may be launched remotely. The exploit has bee...

6.5CVSS5.5AI score0.00254EPSS
SaveExploits1References5
EUVD
EUVD
added 2026/03/08 12:30 p.m.12 views

EUVD-2026-10232

A vulnerability was identified in Tenda F453 1.0.0.3/3.As. Impacted is the function fromPptpUserAdd of the file /goform/PPTPDClient. Such manipulation of the argument username/opttype leads to stack-based buffer overflow. The attack can be executed remotely. The exploit is publicly available and...

9CVSS8AI score0.00632EPSS
SaveExploits1References6
Rows per page
Query Builder