Lucene search
+L

4888 matches found

Cvelist
Cvelist
•added 2026/01/12 12:02 a.m.•53 views

CVE-2026-0852 code-projects Online Music Site AdminUpdateUser.php sql injection

A security flaw has been discovered in code-projects Online Music Site 1.0. The impacted element is an unknown function of the file /Administrator/PHP/AdminUpdateUser.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been...

7.5CVSS0.00379EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2026/01/12 12:02 a.m.•14 views

CVE-2026-0852 code-projects Online Music Site AdminUpdateUser.php sql injection

A security flaw has been discovered in code-projects Online Music Site 1.0. The impacted element is an unknown function of the file /Administrator/PHP/AdminUpdateUser.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been...

7.5CVSS7.1AI score0.00379EPSS
SaveExploits1References5
CVE
CVE
•added 2026/01/12 12:02 a.m.•75 views

CVE-2026-0852

CVE-2026-0852 affects code-projects Online Music Site 1.0. The vulnerability is a SQL injection in the unknown function of the file /Administrator/PHP/AdminUpdateUser.php, triggered by manipulation of the ID argument. The attack can be executed remotely and the exploit has been released publicly....

9.8CVSS7.1AI score0.00379EPSS
SaveExploits1References5Affected Software1
CNNVD
CNNVD
•added 2026/01/12 12:00 a.m.•21 views

Code-Projects Online Music Site SQL Injection Vulnerability

Code-Projects Online Music Site is a Code-Projects open source online music site. Code-Projects Online Music Site version 1.0 suffers from a SQL injection vulnerability that stems from incorrect manipulation of the parameter txtusername in the file /Administrator/PHP/AdminAddUser.php, which could...

9.8CVSS7.1AI score0.00379EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/12 12:00 a.m.•10 views

CVE-2026-0852: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in code-projects Online Music Site 1.0. The impacted element is an unknown function of the file /Administrator/PHP/AdminUpdateUser.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been...

9.8CVSS7.1AI score0.00379EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2026/01/12 12:00 a.m.•41 views

PT-2026-2042

Name of the Vulnerable Software and Affected Versions code-projects Online Music Site version 1.0 Description A security flaw exists in code-projects Online Music Site 1.0. The issue involves a SQL injection impacting an unknown function within the file /Administrator/PHP/AdminUpdateUser.php...

9.8CVSS7AI score0.00379EPSS
SaveExploits1References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/12 12:00 a.m.•12 views

CVE-2026-0851: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in code-projects Online Music Site 1.0. The affected element is an unknown function of the file /Administrator/PHP/AdminAddUser.php. The manipulation of the argument txtusername leads to sql injection. Remote exploitation of the attack is possible. The exploit is...

9.8CVSS7.2AI score0.00379EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2026/01/11 11:32 p.m.•54 views

CVE-2026-0851 code-projects Online Music Site AdminAddUser.php sql injection

A vulnerability was identified in code-projects Online Music Site 1.0. The affected element is an unknown function of the file /Administrator/PHP/AdminAddUser.php. The manipulation of the argument txtusername leads to sql injection. Remote exploitation of the attack is possible. The exploit is...

7.5CVSS0.00379EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2026/01/11 11:32 p.m.•12 views

CVE-2026-0851 code-projects Online Music Site AdminAddUser.php sql injection

A vulnerability was identified in code-projects Online Music Site 1.0. The affected element is an unknown function of the file /Administrator/PHP/AdminAddUser.php. The manipulation of the argument txtusername leads to sql injection. Remote exploitation of the attack is possible. The exploit is...

7.5CVSS7.2AI score0.00379EPSS
SaveExploits1References5
CVE
CVE
•added 2026/01/11 11:32 p.m.•52 views

CVE-2026-0851

Code-projects Online Music Site 1.0 contains an SQL injection in /Administrator/PHP/AdminAddUser.php via the txtusername parameter. The vulnerability allows remote exploitation and is supported by a publicly available exploit. The issue is tied to an unknown function in AdminAddUser.php and is co...

9.8CVSS7.2AI score0.00379EPSS
SaveExploits1References5Affected Software1
osv_cve
osv_cve
•added 2026/01/11 11:15 p.m.•35 views

CVE-2026-0850

A vulnerability was determined in code-projects Intern Membership Management System 1.0. Impacted is an unknown function of the file /admin/deleteactivity.php. Executing a manipulation of the argument activityid can lead to sql injection. The attack may be launched remotely. The exploit has been...

7.2CVSS5.3AI score0.00361EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2026/01/11 11:02 p.m.•43 views

CVE-2026-0850 code-projects Intern Membership Management System delete_activity.php sql injection

A vulnerability was determined in code-projects Intern Membership Management System 1.0. Impacted is an unknown function of the file /admin/deleteactivity.php. Executing a manipulation of the argument activityid can lead to sql injection. The attack may be launched remotely. The exploit has been...

5.8CVSS0.00361EPSS
SaveExploits1References5
CVE
CVE
•added 2026/01/11 11:02 p.m.•108 views

CVE-2026-0850

The CVE-2026-0850 entry applies to the Intern Membership Management System 1.0. The vulnerability affects the /admin/delete_activity.php function where manipulating the activity_id parameter can induce an SQL injection. It is described as exploitable remotely and the exploit has been publicly dis...

7.2CVSS5.3AI score0.00361EPSS
SaveExploits1References5Affected Software1
RedhatCVE
RedhatCVE
•added 2026/01/09 9:36 a.m.•28 views

CVE-2024-34954

Code-projects Budget Management 1.0 is vulnerable to Cross Site Scripting XSS via the budget parameter...

6.1CVSS5.8AI score0.00332EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/01/09 9:35 a.m.•29 views

CVE-2024-34955

Code-projects Budget Management 1.0 is vulnerable to SQL Injection via the delete parameter...

9.8CVSS5.9AI score0.00601EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2026/01/08 9:32 p.m.•59 views

CVE-2026-0729 code-projects Intern Membership Management System add_activity.php sql injection

A vulnerability was detected in code-projects Intern Membership Management System 1.0. Impacted is an unknown function of the file /intern/admin/addactivity.php. Performing a manipulation of the argument Title results in sql injection. Remote exploitation of the attack is possible. The exploit is...

5.8CVSS0.00384EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2026/01/08 9:32 p.m.•10 views

CVE-2026-0729 code-projects Intern Membership Management System add_activity.php sql injection

A vulnerability was detected in code-projects Intern Membership Management System 1.0. Impacted is an unknown function of the file /intern/admin/addactivity.php. Performing a manipulation of the argument Title results in sql injection. Remote exploitation of the attack is possible. The exploit is...

5.8CVSS5.3AI score0.00384EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2026/01/08 8:32 p.m.•76 views

CVE-2026-0728 code-projects Intern Membership Management System delete_admin.php sql injection

A security vulnerability has been detected in code-projects Intern Membership Management System 1.0. This issue affects some unknown processing of the file /intern/admin/deleteadmin.php. Such manipulation of the argument adminid leads to sql injection. The attack may be launched remotely. The...

5.8CVSS0.00423EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2026/01/08 8:02 a.m.•14 views

CVE-2026-0701 code-projects Intern Membership Management System add_admin.php sql injection

A vulnerability was identified in code-projects Intern Membership Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /intern/admin/addadmin.php. The manipulation of the argument Username leads to sql injection. The attack is possible to be carried out...

5.8CVSS5.4AI score0.00366EPSS
SaveExploits1References5
CVE
CVE
•added 2026/01/08 8:02 a.m.•80 views

CVE-2026-0701

The CVE-2026-0701 issue affects code-projects Intern Membership Management System 1.0, specifically the file /intern/admin/add_admin.php where manipulating the Username parameter enables SQL injection. This is described as remotely exploitable, with exploits publicly available. Connected sources ...

7.2CVSS5.4AI score0.00366EPSS
SaveExploits1References6Affected Software1
Rows per page
Query Builder