Lucene search
+L

4755 matches found

Cvelist
Cvelist
•added 2026/08/15 10:00 p.m.•40 views

CVE-2026-19916 code-projects Online Food Order System edit_food_items.php cross site scripting

A vulnerability was detected in code-projects Online Food Order System 1.0. The affected element is an unknown function of the file editfooditems.php. Performing a manipulation of the argument dname results in cross site scripting. Remote exploitation of the attack is possible. The exploit is now...

5.1CVSS0.00348EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/15 12:00 a.m.•1 views

CVE-2026-19917: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in code-projects Online Food Order System 1.0. The impacted element is an unknown function of the file deletefooditems1.php. Executing a manipulation of the argument checkbox can lead to sql injection. The attack can be executed remotely. The exploit has been published and m...

6.5CVSS5.5AI score0.00333EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/08/10 12:31 a.m.•15 views

EUVD-2026-54971

A vulnerability was found in code-projects Task Management System 1.0. This issue affects some unknown processing of the file /user/CommentSave.php. The manipulation of the argument comment/taskid/mineId/recId/myName/myImage results in cross site scripting. It is possible to launch the attack...

5.3CVSS4.1AI score0.0047EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/10 12:00 a.m.•2 views

CVE-2026-19378: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in code-projects Task Management System 1.0. This issue affects some unknown processing of the file /user/CommentSave.php. The manipulation of the argument comment/taskid/mineId/recId/myName/myImage results in cross site scripting. It is possible to launch the attack...

5.3CVSS4.1AI score0.0047EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/08/09 11:45 p.m.•14 views

CVE-2026-19378

A vulnerability was found in code-projects Task Management System 1.0. This issue affects some unknown processing of the file /user/CommentSave.php. The manipulation of the argument comment/taskid/mineId/recId/myName/myImage results in cross site scripting. It is possible to launch the attack...

5.3CVSS4.1AI score0.0047EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
•added 2026/08/09 11:45 p.m.•40 views

CVE-2026-19378 code-projects Task Management System CommentSave.php cross site scripting

A vulnerability was found in code-projects Task Management System 1.0. This issue affects some unknown processing of the file /user/CommentSave.php. The manipulation of the argument comment/taskid/mineId/recId/myName/myImage results in cross site scripting. It is possible to launch the attack...

5.3CVSS0.0047EPSS
SaveExploits0References6
NVD
NVD
•added 2026/08/09 10:17 a.m.•13 views

CVE-2026-19345

A vulnerability was found in code-projects Task Management System 1.0. This affects an unknown part of the file /user/UpdateTaskStatus.php. The manipulation of the argument taskid/val results in missing authorization. It is possible to launch the attack remotely. The exploit has been made public...

6.9CVSS0.00547EPSS
SaveExploits0References6
CVE
CVE
•added 2026/08/09 9:30 a.m.•62 views

CVE-2026-19345

In code-projects Task Management System 1.0, the vulnerable component is the file /user/UpdateTaskStatus.php. The issue arises from manipulation of the arguments task_id/val, leading to missing authorization. It enables remote exploitation, and the exploit has been made public. No remediation ste...

6.9CVSS6.3AI score0.00547EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/08/09 9:15 a.m.•11 views

CVE-2026-19344 code-projects Task Management System comment_count_user.php sql injection

A vulnerability has been found in code-projects Task Management System 1.0. Affected by this issue is some unknown functionality of the file /user/commentcountuser.php. The manipulation of the argument taskid leads to sql injection. It is possible to initiate the attack remotely. The exploit has...

7.5CVSS6.9AI score0.00431EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/08/09 9:15 a.m.•42 views

CVE-2026-19344 code-projects Task Management System comment_count_user.php sql injection

A vulnerability has been found in code-projects Task Management System 1.0. Affected by this issue is some unknown functionality of the file /user/commentcountuser.php. The manipulation of the argument taskid leads to sql injection. It is possible to initiate the attack remotely. The exploit has...

7.5CVSS0.00431EPSS
SaveExploits0References6
CVE
CVE
•added 2026/08/09 9:15 a.m.•80 views

CVE-2026-19344

CVE-2026-19344 affects the Code-Projects Task Management System 1.0. The vulnerability lies in the /user/comment_count_user.php component, where controlling the task_id parameter enables SQL injection. Exploitation is described as remote and the public exploit is disclosed; exploit maturity is la...

7.5CVSS6.9AI score0.00431EPSS
SaveExploits0References6
NVD
NVD
•added 2026/08/09 8:16 a.m.•13 views

CVE-2026-19342

A vulnerability was detected in code-projects Task Management System 1.0. Affected is an unknown function of the file /index.php of the component Login. Performing a manipulation of the argument Password results in improper authentication. The attack is possible to be carried out remotely. The...

7.3CVSS0.00669EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/08/09 7:45 a.m.•45 views

CVE-2026-19343 code-projects Task Management System AdminLogin.php sql injection

A flaw has been found in code-projects Task Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/AdminLogin.php. Executing a manipulation of the argument email/password can lead to sql injection. The attack may be performed from remote. The exploit...

7.5CVSS0.00431EPSS
SaveExploits0References6
CVE
CVE
•added 2026/08/09 7:45 a.m.•61 views

CVE-2026-19343

Code-projects Task Management System 1.0 contains an SQL injection in the file /admin/AdminLogin.php when manipulating the login arguments email/password. The issue is remote-exploitable and has a published exploit. Affected functionality is unknown in scope beyond AdminLogin input handling; no v...

7.5CVSS6.9AI score0.00431EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/08/09 7:30 a.m.•14 views

CVE-2026-19342 code-projects Task Management System Login index.php improper authentication

A vulnerability was detected in code-projects Task Management System 1.0. Affected is an unknown function of the file /index.php of the component Login. Performing a manipulation of the argument Password results in improper authentication. The attack is possible to be carried out remotely. The...

7.3CVSS6.9AI score0.00669EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/09 12:00 a.m.•3 views

CVE-2026-19345: Missing Authorization

A vulnerability was found in code-projects Task Management System 1.0. This affects an unknown part of the file /user/UpdateTaskStatus.php. The manipulation of the argument taskid/val results in missing authorization. It is possible to launch the attack remotely. The exploit has been made public...

6.9CVSS6.3AI score0.00547EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/09 12:00 a.m.•1 views

CVE-2026-19344: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in code-projects Task Management System 1.0. Affected by this issue is some unknown functionality of the file /user/commentcountuser.php. The manipulation of the argument taskid leads to sql injection. It is possible to initiate the attack remotely. The exploit has...

7.5CVSS6.9AI score0.00431EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/09 12:00 a.m.•1 views

CVE-2026-19343: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in code-projects Task Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/AdminLogin.php. Executing a manipulation of the argument email/password can lead to sql injection. The attack may be performed from remote. The exploit...

7.5CVSS6.9AI score0.00431EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/09 12:00 a.m.•3 views

CVE-2026-19342: Improper Authentication

A vulnerability was detected in code-projects Task Management System 1.0. Affected is an unknown function of the file /index.php of the component Login. Performing a manipulation of the argument Password results in improper authentication. The attack is possible to be carried out remotely. The...

7.3CVSS7AI score0.00669EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/30 12:00 a.m.•3 views

CVE-2025-65342: Improper Neutralization of Input During Web Page Generation

code-projects Blood System 1.0 is vulnerable to Cross Site Scripting XSS in /don.php via the city field...

6.1CVSS5.8AI score0.00179EPSS
SaveExploits0References2
Rows per page
Query Builder