Lucene search
+L

4888 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/25 12:00 a.m.•13 views

CVE-2026-9419: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in code-projects Employee Management System 1.0. Affected by this issue is some unknown functionality of the file /empproject.php. The manipulation of the argument ID leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been...

5.3CVSS3.8AI score0.00263EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/25 12:00 a.m.•6 views

CVE-2026-9415: Improper Neutralization of Input During Web Page Generation

A weakness has been identified in code-projects Employee Management System 1.0. This affects an unknown function of the file /eloginwel.php. This manipulation of the argument ID causes cross site scripting. Remote exploitation of the attack is possible. The exploit has been made available to the...

5.3CVSS4AI score0.00263EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/05/25 12:00 a.m.•39 views

PT-2026-42991

A security vulnerability has been detected in code-projects Employee Management System 1.0. This impacts an unknown function of the file /myprofile.php. Such manipulation of the argument ID leads to cross site scripting. The attack can be executed remotely. The exploit has been disclosed publicly...

5.3CVSS4.2AI score0.00263EPSS
SaveExploits0References5
CVE
CVE
•added 2026/05/08 1:30 a.m.•50 views

CVE-2026-8125

The affected software is code-projects Simple Chat System 1.0. Vulnerable component: sendMessage.php. Root cause: improper validation of argument type/length/business parameter validity leading to SQL injection. Attack could be launched remotely and the exploit is publicly available. CVSS metrics...

6.5CVSS6.5AI score0.0025EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/05/08 1:30 a.m.•20 views

CVE-2026-8125 code-projects Simple Chat System sendMessage.php sql injection

A vulnerability was detected in code-projects Simple Chat System 1.0. This vulnerability affects unknown code of the file sendMessage.php. The manipulation of the argument type/length/business parameter validity results in sql injection. The attack may be launched remotely. The exploit is now...

6.5CVSS6.5AI score0.0025EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/05/08 1:30 a.m.•99 views

CVE-2026-8125 code-projects Simple Chat System sendMessage.php sql injection

A vulnerability was detected in code-projects Simple Chat System 1.0. This vulnerability affects unknown code of the file sendMessage.php. The manipulation of the argument type/length/business parameter validity results in sql injection. The attack may be launched remotely. The exploit is now...

6.5CVSS0.0025EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2026/05/08 12:00 a.m.•34 views

Code-Projects Simple Chat System Injection Vulnerabilities

Code-Projects Simple Chat System is an easy-to-use chat system developed by Code-Projects as open source. Version 1.0 of Code-Projects Simple Chat System has a SQL injection vulnerability, which arises from the validations of the parameters type/length/business in the sendMessage.php file,...

6.5CVSS6.5AI score0.0025EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/05/07 9:30 p.m.•33 views

EUVD-2026-28444

A security vulnerability has been detected in code-projects Feedback System 1.0. Impacted is an unknown function of the file /admin/checklogin.php. Such manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed publicly...

7.5CVSS7AI score0.00254EPSS
SaveExploits0References6
CVE
CVE
•added 2026/05/07 8:30 p.m.•47 views

CVE-2026-8098

code-projects Feedback System 1.0 contains a SQL injection in an unknown function of /admin/checklogin.php triggered by manipulating the email parameter. The flaw can be exploited remotely, with exploits publicly disclosed. No remediation details are provided in the supplied documents.

7.5CVSS7AI score0.00254EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/05/07 8:30 p.m.•24 views

CVE-2026-8098 code-projects Feedback System checklogin.php sql injection

A security vulnerability has been detected in code-projects Feedback System 1.0. Impacted is an unknown function of the file /admin/checklogin.php. Such manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed publicly...

7.5CVSS7AI score0.00254EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/05/07 8:30 p.m.•62 views

CVE-2026-8098 code-projects Feedback System checklogin.php sql injection

A security vulnerability has been detected in code-projects Feedback System 1.0. Impacted is an unknown function of the file /admin/checklogin.php. Such manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed publicly...

7.5CVSS0.00254EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2026/05/07 8:30 p.m.•14 views

CVE-2026-8098

A security vulnerability has been detected in code-projects Feedback System 1.0. Impacted is an unknown function of the file /admin/checklogin.php. Such manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed publicly...

7.5CVSS7AI score0.00254EPSS
SaveExploits0References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/07 12:00 a.m.•8 views

CVE-2026-8098: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in code-projects Feedback System 1.0. Impacted is an unknown function of the file /admin/checklogin.php. Such manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed publicly...

7.5CVSS7AI score0.00254EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/05/07 12:00 a.m.•28 views

Code-Projects Feedback System Injection Vulnerabilities

Code-Projects Feedback System is an open-source feedback system developed by Code-Projects. Version 1.0 of the Code-Projects Feedback System has a injection vulnerability; this vulnerability stems from the handling of the parameter 'email' in the file 'admin/checklogin.php', which may lead to SQL...

7.5CVSS7.1AI score0.00254EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/05/04 12:45 a.m.•64 views

CVE-2026-7716 code-projects Gym Management System In PHP/Windows NT index.php sql injection

A vulnerability was found in code-projects Gym Management System In PHP and Windows NT 1.0. This vulnerability affects unknown code of the file /index.php. Performing a manipulation of the argument day results in sql injection. The attack can be initiated remotely. The exploit has been made publi...

6.5CVSS0.00192EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/05/04 12:45 a.m.•19 views

CVE-2026-7716 code-projects Gym Management System In PHP/Windows NT index.php sql injection

A vulnerability was found in code-projects Gym Management System In PHP and Windows NT 1.0. This vulnerability affects unknown code of the file /index.php. Performing a manipulation of the argument day results in sql injection. The attack can be initiated remotely. The exploit has been made publi...

6.5CVSS6.4AI score0.00192EPSS
SaveExploits0References5
CVE
CVE
•added 2026/05/02 1:45 p.m.•61 views

CVE-2026-7632

The CVE-2026-7632 entry describes a SQL injection in code-projects Online Hospital Management System 1.0, specifically in /viewappointment.php through the delid parameter. The underlying cause is input manipulation that facilitates injection, with remote exploitation possible. Public exploitation...

7.5CVSS6.9AI score0.00269EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/05/02 1:45 p.m.•17 views

CVE-2026-7632 code-projects Online Hospital Management System viewappointment.php sql injection

A vulnerability was determined in code-projects Online Hospital Management System 1.0. This affects an unknown function of the file /viewappointment.php. This manipulation of the argument delid causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly...

7.5CVSS6.9AI score0.00269EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/05/02 1:30 p.m.•18 views

CVE-2026-7631 code-projects Online Hospital Management System Registration improper authorization

A vulnerability was found in code-projects Online Hospital Management System 1.0. The impacted element is an unknown function of the component Registration Handler. The manipulation of the argument Username results in improper authorization. The attack can be executed remotely. The exploit has be...

5.5CVSS5.5AI score0.00225EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2026/05/02 12:00 a.m.•26 views

Code-Projects Online Hospital Management System Security Vulnerabilities

Code-Projects Online Hospital Management System is an open-source online hospital management system developed by Code-Projects. Version 1.0 of the Code-Projects Online Hospital Management System contains a security vulnerability. This vulnerability stems from the handling of the parameter...

5.5CVSS5.8AI score0.00225EPSS
SaveExploits0References2
Rows per page
Query Builder