Lucene search
+L

57729 matches found

osv_cve
osv_cve
•added 2026/01/08 9:15 p.m.•21 views

CVE-2026-0728

A security vulnerability has been detected in code-projects Intern Membership Management System 1.0. This issue affects some unknown processing of the file /intern/admin/deleteadmin.php. Such manipulation of the argument adminid leads to sql injection. The attack may be launched remotely. The...

7.2CVSS5.8AI score0.00423EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2026/01/08 8:32 p.m.•75 views

CVE-2026-0728 code-projects Intern Membership Management System delete_admin.php sql injection

A security vulnerability has been detected in code-projects Intern Membership Management System 1.0. This issue affects some unknown processing of the file /intern/admin/deleteadmin.php. Such manipulation of the argument adminid leads to sql injection. The attack may be launched remotely. The...

5.8CVSS0.00423EPSS
SaveExploits1References5
CVE
CVE
•added 2026/01/08 8:32 p.m.•53 views

CVE-2026-0728

The CVE-2026-0728 entry describes a SQL injection in code-projects Intern Membership Management System 1.0, via the admin_id parameter in /intern/admin/delete_admin.php. The issue is remotely exploitable and exploits have been publicly disclosed. No remediation/fix details are provided in the con...

7.2CVSS5.3AI score0.00423EPSS
SaveExploits1References5Affected Software1
osv_cve
osv_cve
•added 2026/01/08 6:15 a.m.•19 views

CVE-2026-0698

A vulnerability has been found in code-projects Intern Membership Management System 1.0. This affects an unknown function of the file /intern/admin/editstudents.php. Such manipulation of the argument adminid leads to sql injection. The attack may be launched remotely. The exploit has been disclos...

7.2CVSS5.8AI score0.00401EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2026/01/08 12:00 a.m.•42 views

PT-2026-1981

Name of the Vulnerable Software and Affected Versions TOTOLINK WA1200 version 5.9c.2914 Description A flaw exists in the HTTP Request Handler component of TOTOLINK WA1200 version 5.9c.2914. Specifically, the issue resides in an unknown function within the cstecgi.cgi file. This manipulation resul...

7.5CVSS5.2AI score0.00706EPSS
SaveExploits1References12
RedhatCVE
RedhatCVE
•added 2026/01/07 9:13 a.m.•27 views

CVE-2024-2776

A vulnerability, which was classified as critical, was found in Campcodes Online Marriage Registration System 1.0. Affected is an unknown function of the file /admin/search.php. The manipulation of the argument searchdata leads to sql injection. It is possible to launch the attack remotely. The...

6.5CVSS6.9AI score0.00496EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/01/06 10:03 a.m.•26 views

CVE-2026-0585

A security vulnerability has been detected in code-projects Online Product Reservation System 1.0. Impacted is an unknown function of the file /orderview.php of the component GET Parameter Handler. Such manipulation of the argument transactionid leads to sql injection. The attack can be executed...

7.5CVSS7AI score0.00441EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/01/06 5:07 a.m.•33 views

CVE-2025-15458

A vulnerability was determined in bg5sbk MiniCMS up to 1.8. This affects an unknown function of the file /mc-admin/post-edit.php of the component Article Handler. Executing a manipulation can lead to improper authentication. It is possible to launch the attack remotely. The exploit has been...

7.5CVSS6.6AI score0.00574EPSS
SaveExploits1References1
GithubExploit
GithubExploit
•added 2026/01/06 1:12 a.m.•252 views

Exploit for Missing Authentication for Critical Function in Jetbrains Teamcity

Bash Command Examples Batch Scanning python teamcit...

9.8CVSS7.5AI score0.99987EPSS
SaveExploits19
NVD
NVD
•added 2026/01/05 1:15 p.m.•23 views

CVE-2026-0590

A vulnerability was determined in code-projects Online Product Reservation System 1.0. The affected element is an unknown function of the file /app/checkout/delete.php of the component POST Parameter Handler. This manipulation of the argument ID causes sql injection. It is possible to initiate th...

9.8CVSS0.00367EPSS
SaveExploits1References6
EUVD
EUVD
•added 2026/01/05 12:32 p.m.•29 views

EUVD-2026-0855

A vulnerability was determined in code-projects Online Product Reservation System 1.0. The affected element is an unknown function of the file /app/checkout/delete.php of the component POST Parameter Handler. This manipulation of the argument ID causes sql injection. It is possible to initiate th...

6.5CVSS6.4AI score0.00367EPSS
SaveExploits1References8
NVD
NVD
•added 2026/01/05 10:15 a.m.•21 views

CVE-2026-0585

A security vulnerability has been detected in code-projects Online Product Reservation System 1.0. Impacted is an unknown function of the file /orderview.php of the component GET Parameter Handler. Such manipulation of the argument transactionid leads to sql injection. The attack can be executed...

9.8CVSS0.00441EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2026/01/05 5:02 a.m.•59 views

CVE-2025-15458 bg5sbk MiniCMS Article post-edit.php improper authentication

A vulnerability was determined in bg5sbk MiniCMS up to 1.8. This affects an unknown function of the file /mc-admin/post-edit.php of the component Article Handler. Executing a manipulation can lead to improper authentication. It is possible to launch the attack remotely. The exploit has been...

7.5CVSS0.00574EPSS
SaveExploits1References4
osv_cve
osv_cve
•added 2026/01/05 4:02 a.m.•17 views

CVE-2025-15456 bg5sbk MiniCMS Publish page-edit.php improper authentication

A vulnerability has been found in bg5sbk MiniCMS up to 1.8. The affected element is an unknown function of the file /mc-admin/page-edit.php of the component Publish Page Handler. Such manipulation leads to improper authentication. The attack may be performed from remote. The exploit has been...

6.9CVSS6.3AI score0.00439EPSS
SaveExploits1References6
RedhatCVE
RedhatCVE
•added 2026/01/03 6:59 p.m.•26 views

CVE-2026-0569

A vulnerability has been found in code-projects Online Music Site 1.0. This affects an unknown function of the file /Frontend/AlbumByCategory.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the publi...

7.5CVSS6.9AI score0.00387EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/01/03 5:01 p.m.•36 views

CVE-2026-0566

A security vulnerability has been detected in code-projects Content Management System 1.0. Impacted is an unknown function of the file /admin/editposts.php. The manipulation of the argument image leads to unrestricted upload. The attack is possible to be carried out remotely. The exploit has been...

5.8CVSS6.6AI score0.00355EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/01/03 5:03 a.m.•33 views

CVE-2025-15429

A security vulnerability has been detected in UTT 进取 512W 1.7.7-171114. Affected by this vulnerability is the function strcpy of the file /goform/formConfigCliForEngineerOnly. Such manipulation of the argument addCommand leads to buffer overflow. It is possible to launch the attack remotely. The...

9CVSS6.9AI score0.00881EPSS
SaveExploits1References1
NVD
NVD
•added 2026/01/02 5:16 p.m.•33 views

CVE-2026-0566

A security vulnerability has been detected in code-projects Content Management System 1.0. Impacted is an unknown function of the file /admin/editposts.php. The manipulation of the argument image leads to unrestricted upload. The attack is possible to be carried out remotely. The exploit has been...

9.8CVSS0.00355EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2026/01/02 9:02 a.m.•50 views

CVE-2026-0546 code-projects Content Management System search.php sql injection

A vulnerability was determined in code-projects Content Management System 1.0. This impacts an unknown function of the file search.php. This manipulation of the argument Value causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may ...

7.5CVSS0.00442EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2026/01/02 12:00 a.m.•21 views

PT-2026-1177

CVE-2025-34167 - Apache HTTP Server Cross-Site Request Forgery CVE ID : CVE-2025-34167 Published : Jan. 2, 2026, 5:15 p.m. | 14 minutes ago Description : Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure. Severity: 0.0 | NA Visit the lin...

6.1AI score
SaveExploits0References1
Rows per page
Query Builder