Lucene search
K

3482 matches found

Cvelist
Cvelist
added 2026/04/06 5:45 p.m.18 views

CVE-2026-5672 code-projects Simple IT Discussion Forum Parameter edit-category.php sql injection

A vulnerability has been found in code-projects Simple IT Discussion Forum 1.0. Affected by this issue is some unknown functionality of the file /edit-category.php of the component Parameter Handler. The manipulation of the argument catid leads to sql injection. It is possible to initiate the...

7.5CVSS0.00043EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2026/04/06 5:45 p.m.1 views

CVE-2026-5672 code-projects Simple IT Discussion Forum Parameter edit-category.php sql injection

A vulnerability has been found in code-projects Simple IT Discussion Forum 1.0. Affected by this issue is some unknown functionality of the file /edit-category.php of the component Parameter Handler. The manipulation of the argument catid leads to sql injection. It is possible to initiate the...

7.5CVSS5.7AI score0.00043EPSS
Exploits0References5
CVE
CVE
added 2026/04/06 3:30 p.m.3 views

CVE-2026-5666

Code-projects Online FIR System 1.0 is affected. The vulnerability lies in the SQL Database Backup File Handler’s /complaints.sql functionality, where manipulation leads to insecure storage of sensitive information. Attack surface is network-based with no authentication required (per CVSS data), ...

6.9CVSS5.8AI score0.00044EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2026/04/06 3:30 p.m.1 views

CVE-2026-5666 code-projects Online FIR System SQL Database Backup File complaints.sql sensitive information

A vulnerability was detected in code-projects Online FIR System 1.0. Affected by this issue is some unknown functionality of the file /complaints.sql of the component SQL Database Backup File Handler. The manipulation results in insecure storage of sensitive information. The attack may be perform...

6.9CVSS5.6AI score0.00044EPSS
Exploits0References5
Cvelist
Cvelist
added 2026/04/06 3:30 p.m.22 views

CVE-2026-5666 code-projects Online FIR System SQL Database Backup File complaints.sql sensitive information

A vulnerability was detected in code-projects Online FIR System 1.0. Affected by this issue is some unknown functionality of the file /complaints.sql of the component SQL Database Backup File Handler. The manipulation results in insecure storage of sensitive information. The attack may be perform...

6.9CVSS0.00044EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2026/04/06 3:15 p.m.1 views

CVE-2026-5665 code-projects Online FIR System Login checklogin.php sql injection

A security vulnerability has been detected in code-projects Online FIR System 1.0. Affected by this vulnerability is an unknown functionality of the file /Login/checklogin.php of the component Login. The manipulation of the argument email/password leads to sql injection. The attack is possible to...

7.5CVSS6.8AI score0.00043EPSS
Exploits0References5
Cvelist
Cvelist
added 2026/04/06 3:15 p.m.24 views

CVE-2026-5665 code-projects Online FIR System Login checklogin.php sql injection

A security vulnerability has been detected in code-projects Online FIR System 1.0. Affected by this vulnerability is an unknown functionality of the file /Login/checklogin.php of the component Login. The manipulation of the argument email/password leads to sql injection. The attack is possible to...

7.5CVSS0.00043EPSS
Exploits0References5
CVE
CVE
added 2026/04/06 3:15 p.m.7 views

CVE-2026-5665

CVE-2026-5665 affects code-projects Online FIR System 1.0. The vulnerability is an SQL injection in the Login component, specifically the /Login/checklogin.php function, caused by unsafely handling the email/password inputs. Exploitation is remote and public disclosures exist; CVSS data indicate ...

7.5CVSS6.8AI score0.00043EPSS
Exploits0References5
CVE
CVE
added 2026/04/06 11:15 a.m.4 views

CVE-2026-5649

CVE-2026-5649 affects code-projects Online Application System for Admission 1.0, specifically the Endpoint’s file /enrollment/admsnform.php. The issue is a SQL injection caused by some unknown processing in that endpoint, allowing remote execution. Public exploit existence is stated, and the expl...

6.5CVSS6.4AI score0.00012EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2026/04/06 11:0 a.m.0 views

CVE-2026-5648 code-projects Simple Laundry System Parameter userfinishregister.php sql injection

A flaw has been found in code-projects Simple Laundry System 1.0. This vulnerability affects unknown code of the file /userfinishregister.php of the component Parameter Handler. This manipulation of the argument firstName causes sql injection. Remote exploitation of the attack is possible. The...

7.5CVSS6.8AI score0.00043EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2026/04/06 10:45 a.m.0 views

CVE-2026-5647 code-projects Online Shoe Store Add Product admin_feature.php cross site scripting

A vulnerability was detected in code-projects Online Shoe Store 1.0. This affects an unknown part of the file /admin/adminfeature.php of the component Add Product Page. The manipulation of the argument productname results in cross site scripting. The attack may be launched remotely. The exploit i...

4.8CVSS4.4AI score0.00035EPSS
Exploits0References5
CVE
CVE
added 2026/04/06 10:45 a.m.4 views

CVE-2026-5647

CVE-2026-5647 affects code-projects Online Shoe Store 1.0. The vulnerability is in the admin feature for adding products, specifically through an XSS condition triggered by manipulating the product_name parameter in /admin/admin_feature.php. The issue is exploitable remotely, and public exploit d...

4.8CVSS4.4AI score0.00035EPSS
Exploits0References5
Cvelist
Cvelist
added 2026/04/06 10:30 a.m.30 views

CVE-2026-5646 code-projects Easy Blog Site login.php sql injection

A security vulnerability has been detected in code-projects Easy Blog Site 1.0. Affected by this issue is some unknown functionality of the file login.php. The manipulation of the argument username/password leads to sql injection. The attack may be initiated remotely. The exploit has been disclos...

7.5CVSS0.00014EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2026/04/06 10:30 a.m.2 views

CVE-2026-5646 code-projects Easy Blog Site login.php sql injection

A security vulnerability has been detected in code-projects Easy Blog Site 1.0. Affected by this issue is some unknown functionality of the file login.php. The manipulation of the argument username/password leads to sql injection. The attack may be initiated remotely. The exploit has been disclos...

7.5CVSS6.9AI score0.00014EPSS
Exploits0References5
CVE
CVE
added 2026/04/06 10:30 a.m.3 views

CVE-2026-5646

Vulnerability CVE-2026-5646 affects code-projects Easy Blog Site 1.0, specifically the login.php file. The issue arises from manipulating the username/password parameters, leading to a SQL injection in a function handling authentication. Attack vector is network remote, with low attack complexity...

7.5CVSS6.9AI score0.00014EPSS
Exploits0References5
CNNVD
CNNVD
added 2026/04/06 12:0 a.m.4 views

Code-Projects Online FIR System 安全漏洞

Code-Projects Online FIR System is an open-source online FIR system developed by Code-Projects. Version 1.0 of the code-projects Online FIR System contains a security vulnerability. This vulnerability stems from the unsafe storage of the/complaints.sql file in the SQL database backup processing...

6.9CVSS6.1AI score0.00044EPSS
Exploits0References5
CNNVD
CNNVD
added 2026/04/06 12:0 a.m.3 views

Code-Projects Online FIR System SQL注入漏洞

Code-Projects Online FIR System is an open-source online FIR system developed by Code-Projects. Version 1.0 of the Code-Projects Online FIR System has a SQL injection vulnerability. This vulnerability arises from incorrect handling of parameters email and password in the file /Login/checklogin.ph...

7.5CVSS7.2AI score0.00043EPSS
Exploits0References5
CNNVD
CNNVD
added 2026/04/06 12:0 a.m.2 views

Code-Projects Online Application System for Admission SQL注入漏洞

Code-Projects Online Application System for Admission is an online application system developed by Code-Projects. Version 1.0 of the Code-Projects Online Application System for Admission contains a SQL injection vulnerability. This vulnerability stems from incorrect operations on the...

6.5CVSS6.7AI score0.00012EPSS
Exploits0References6
CNNVD
CNNVD
added 2026/04/06 12:0 a.m.2 views

Code-Projects Blog Site SQL注入漏洞

Code-Projects Blog Site is an open-source blog system developed by Code-Projects. Version 1.0 of Code-Projects Blog Site has a SQL injection vulnerability. This vulnerability stems from incorrect handling of parameters username and password in the login.php file, which may lead to SQL injection...

7.5CVSS7.2AI score0.00014EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2026/04/06 12:0 a.m.2 views

PT-2026-30599

A vulnerability has been found in code-projects Online Application System for Admission 1.0. This issue affects some unknown processing of the file /enrollment/admsnform.php of the component Endpoint. Such manipulation leads to sql injection. The attack can be executed remotely. The exploit has...

6.5CVSS6.4AI score0.00012EPSS
Exploits0References6
Rows per page
Query Builder