Lucene search
+L

756 matches found

Cvelist
Cvelist
•added 2026/02/09 3:02 a.m.•54 views

CVE-2026-2212 code-projects Online Music Site AdminEditCategory.php sql injection

A vulnerability was identified in code-projects Online Music Site 1.0. Affected by this vulnerability is an unknown functionality of the file /Administrator/PHP/AdminEditCategory.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. Th...

7.5CVSS0.00376EPSS
SaveExploits1References5
attackerkb
attackerkb
•added 2026/02/09 3:02 a.m.•10 views

CVE-2026-2212

A vulnerability was identified in code-projects Online Music Site 1.0. Affected by this vulnerability is an unknown functionality of the file /Administrator/PHP/AdminEditCategory.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. Th...

7.5CVSS7.2AI score0.00376EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2026/02/09 3:02 a.m.•9 views

CVE-2026-2212 code-projects Online Music Site AdminEditCategory.php sql injection

A vulnerability was identified in code-projects Online Music Site 1.0. Affected by this vulnerability is an unknown functionality of the file /Administrator/PHP/AdminEditCategory.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. Th...

7.5CVSS7AI score0.00376EPSS
SaveExploits1References5
CVE
CVE
•added 2026/02/09 3:02 a.m.•57 views

CVE-2026-2212

CVE-2026-2212 affects code-projects Online Music Site 1.0. The vulnerability is in the unknown/undisclosed function of the file /Administrator/PHP/AdminEditCategory.php, where manipulation of the parameter ID leads to a SQL injection vulnerability. Multiple connected sources (NVD, Red Hat, CVE li...

9.8CVSS7AI score0.00376EPSS
SaveExploits1References5Affected Software1
RedhatCVE
RedhatCVE
•added 2026/02/09 1:33 a.m.•19 views

CVE-2026-2117

A vulnerability was found in itsourcecode Society Management System 1.0. The affected element is an unknown function of the file /admin/editactivity.php. Performing a manipulation of the argument activityid results in sql injection. The attack can be initiated remotely. The exploit has been made...

9.8CVSS7.1AI score0.00376EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2026/02/09 12:00 a.m.•18 views

Code-Projects Online Music Site SQL注入漏洞

Code-Projects Online Music Site is an online music website developed by Code-Projects as open source. Version 1.0 of Code-Projects Online Music Site has a SQL injection vulnerability. This vulnerability stems from incorrect handling of parameters related to files, administrators, and the...

9.8CVSS7.2AI score0.00376EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2026/02/09 12:00 a.m.•25 views

PT-2026-7058

A vulnerability was identified in code-projects Online Music Site 1.0. Affected by this vulnerability is an unknown functionality of the file /Administrator/PHP/AdminEditCategory.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. Th...

7.5CVSS5.5AI score0.00376EPSS
SaveExploits1References6
EUVD
EUVD
•added 2026/02/08 12:30 a.m.•19 views

EUVD-2026-5702

A vulnerability was detected in itsourcecode Society Management System 1.0. This vulnerability affects unknown code of the file /admin/editadmin.php. The manipulation of the argument adminid results in sql injection. The attack may be performed from remote. The exploit is now public and may be us...

9.8CVSS5.3AI score0.00429EPSS
SaveExploits1References6
OSV
OSV
•added 2026/02/08 12:16 a.m.•15 views

CVE-2026-2117

A vulnerability was found in itsourcecode Society Management System 1.0. The affected element is an unknown function of the file /admin/editactivity.php. Performing a manipulation of the argument activityid results in sql injection. The attack can be initiated remotely. The exploit has been made...

9.8CVSS5.8AI score0.00376EPSS
SaveExploits1References5
NVD
NVD
•added 2026/02/08 12:16 a.m.•19 views

CVE-2026-2116

A vulnerability has been found in itsourcecode Society Management System 1.0. Impacted is an unknown function of the file /admin/editexpenses.php. Such manipulation of the argument expensesid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to t...

9.8CVSS0.00429EPSS
SaveExploits1References5
NVD
NVD
•added 2026/02/08 12:16 a.m.•22 views

CVE-2026-2117

A vulnerability was found in itsourcecode Society Management System 1.0. The affected element is an unknown function of the file /admin/editactivity.php. Performing a manipulation of the argument activityid results in sql injection. The attack can be initiated remotely. The exploit has been made...

9.8CVSS0.00376EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2026/02/08 12:00 a.m.•21 views

itsourcecode Society Management System SQL注入漏洞

itsourcecode Society Management System is an open-source social management system developed by itsourcecode. Version 1.0 of the itsourcecode Society Management System has a SQL injection vulnerability. This vulnerability arises from incorrect handling of the expensesid parameter in the file...

9.8CVSS7.2AI score0.00429EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2026/02/08 12:00 a.m.•25 views

itsourcecode Society Management System SQL注入漏洞

itsourcecode Society Management System is an open-source social management system developed by itsourcecode. Version 1.0 of the itsourcecode Society Management System has a SQL injection vulnerability. This vulnerability arises from incorrect handling of the parameter activityid in the file...

9.8CVSS7.2AI score0.00376EPSS
SaveExploits1References6
attackerkb
attackerkb
•added 2026/02/07 11:02 p.m.•13 views

CVE-2026-2116

A vulnerability has been found in itsourcecode Society Management System 1.0. Impacted is an unknown function of the file /admin/editexpenses.php. Such manipulation of the argument expensesid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to t...

7.5CVSS7.2AI score0.00429EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2026/02/07 10:02 p.m.•48 views

CVE-2026-2114 itsourcecode Society Management System edit_admin.php sql injection

A vulnerability was detected in itsourcecode Society Management System 1.0. This vulnerability affects unknown code of the file /admin/editadmin.php. The manipulation of the argument adminid results in sql injection. The attack may be performed from remote. The exploit is now public and may be us...

7.5CVSS0.00429EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2026/02/07 12:00 a.m.•35 views

PT-2026-6936

Name of the Vulnerable Software and Affected Versions itsourcecode Society Management System version 1.0 Description A flaw exists in itsourcecode Society Management System 1.0 that allows for remote SQL injection. The issue is located in the /admin/edit expenses.php file, specifically through...

9.8CVSS5.5AI score0.00429EPSS
SaveExploits1References11
NVD
NVD
•added 2026/02/03 6:16 p.m.•19 views

CVE-2019-25265

Online Inventory Manager 3.2 contains a stored cross-site scripting vulnerability in the group description field of the admin edit groups section. Attackers can inject malicious JavaScript through the description field that will execute when the groups page is viewed, allowing potential cookie...

6.4CVSS0.00328EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/02/03 4:52 p.m.•19 views

EUVD-2019-19380

Online Inventory Manager 3.2 contains a stored cross-site scripting vulnerability in the group description field of the admin edit groups section. Attackers can inject malicious JavaScript through the description field that will execute when the groups page is viewed, allowing potential cookie...

6.4CVSS5.1AI score0.00328EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2026/02/03 4:52 p.m.•14 views

CVE-2019-25265

Online Inventory Manager 3.2 contains a stored cross-site scripting vulnerability in the group description field of the admin edit groups section. Attackers can inject malicious JavaScript through the description field that will execute when the groups page is viewed, allowing potential cookie...

6.4CVSS5.9AI score0.00328EPSS
SaveExploits0References4Affected Software1
Vulnrichment
Vulnrichment
•added 2026/02/03 4:52 p.m.•11 views

CVE-2019-25265 Online Inventory Manager 3.2 - Persistent Cross-Site Scripting

Online Inventory Manager 3.2 contains a stored cross-site scripting vulnerability in the group description field of the admin edit groups section. Attackers can inject malicious JavaScript through the description field that will execute when the groups page is viewed, allowing potential cookie...

6.4CVSS5.9AI score0.00328EPSS
SaveExploits0References4
Rows per page
Query Builder