Lucene search
K

11 matches found

RedhatCVE
RedhatCVE
added 2026/04/14 7:23 p.m.1 views

CVE-2026-6037

A vulnerability was determined in code-projects Vehicle Showroom Management System 1.0. This affects an unknown function of the file /util/AddVehicleFunction.php. This manipulation of the argument BRANCHID causes sql injection. The attack is possible to be carried out remotely. The exploit has be...

7.5CVSS6.9AI score0.00043EPSS
Exploits0References1
EUVD
EUVD
added 2026/04/13 3:30 a.m.0 views

EUVD-2026-21774

A vulnerability was detected in code-projects Vehicle Showroom Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /util/MonthTotalReportUpdateFunction.php. Performing a manipulation of the argument BRANCHID results in sql injection. The attack is possibl...

7.5CVSS5.7AI score0.00014EPSS
Exploits0References6
Cvelist
Cvelist
added 2026/04/13 1:45 a.m.26 views

CVE-2026-6149 code-projects Vehicle Showroom Management System BookVehicleFunction.php sql injection

A flaw has been found in code-projects Vehicle Showroom Management System 1.0. Affected by this issue is some unknown functionality of the file /util/BookVehicleFunction.php. Executing a manipulation of the argument BRANCHID can lead to sql injection. The attack may be performed from remote. The...

7.5CVSS0.00014EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2026/04/13 1:30 a.m.1 views

CVE-2026-6148 code-projects Vehicle Showroom Management System MonthTotalReportUpdateFunction.php sql injection

A vulnerability was detected in code-projects Vehicle Showroom Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /util/MonthTotalReportUpdateFunction.php. Performing a manipulation of the argument BRANCHID results in sql injection. The attack is possibl...

7.5CVSS6.9AI score0.00014EPSS
Exploits0References5
CNNVD
CNNVD
added 2026/04/13 12:0 a.m.1 views

Code-Projects Vehicle Showroom Management System SQL注入漏洞

The Code-Projects Vehicle Showroom Management System is an open-source system for managing automobile showrooms developed by Code-Projects. Version 1.0 of the Code-Projects Vehicle Showroom Management System contains a SQL injection vulnerability. This vulnerability arises from improper handling ...

7.5CVSS7.2AI score0.00014EPSS
Exploits0References5
Cvelist
Cvelist
added 2026/04/10 8:30 a.m.24 views

CVE-2026-6037 code-projects Vehicle Showroom Management System AddVehicleFunction.php sql injection

A vulnerability was determined in code-projects Vehicle Showroom Management System 1.0. This affects an unknown function of the file /util/AddVehicleFunction.php. This manipulation of the argument BRANCHID causes sql injection. The attack is possible to be carried out remotely. The exploit has be...

7.5CVSS0.00043EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2026/04/10 12:0 a.m.0 views

PT-2026-31903

Name of the Vulnerable Software and Affected Versions code-projects Vehicle Showroom Management System version 1.0 Description A flaw exists in code-projects Vehicle Showroom Management System 1.0, specifically within the /util/RegisterCustomerFunction.php file. Manipulation of the BRANCH ID...

7.5CVSS7.1AI score0.00043EPSS
Exploits0References9
CNNVD
CNNVD
added 2026/04/10 12:0 a.m.2 views

Code-Projects Vehicle Showroom Management System SQL注入漏洞

The Code-Projects Vehicle Showroom Management System is an open-source system for managing automobile showrooms developed by Code-Projects. Version 1.0 of the Code-Projects Vehicle Showroom Management System contains a SQL injection vulnerability. This vulnerability arises from incorrect handling...

7.5CVSS7.2AI score0.00043EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2026/04/10 12:0 a.m.3 views

PT-2026-31896

Name of the Vulnerable Software and Affected Versions code-projects Vehicle Showroom Management System version 1.0 Description A flaw exists in an unknown function within the /BranchManagement/ProfitAndLossReport.php file. Manipulation of the BRANCH ID argument can lead to cross site scripting,...

5.3CVSS4.9AI score0.00013EPSS
Exploits0References9
RedhatCVE
RedhatCVE
added 2025/05/22 8:43 p.m.0 views

CVE-2021-39889

In all versions of GitLab EE since version 14.1, due to an insecure direct object reference vulnerability, an endpoint may reveal the protected branch name to a malicious user who makes a crafted API call with the ID of the protected branch...

4.3CVSS5.9AI score0.00245EPSS
Exploits0References1
OSV
OSV
added 2021/10/05 2:15 p.m.0 views

UBUNTU-CVE-2021-39889

In all versions of GitLab EE since version 14.1, due to an insecure direct object reference vulnerability, an endpoint may reveal the protected branch name to a malicious user who makes a crafted API call with the ID of the protected branch...

4.3CVSS5.8AI score0.00245EPSS
Exploits0References5
Rows per page
Query Builder