Lucene search
+L

307 matches found

CNNVD
CNNVD
•added 2026/04/06 12:00 a.m.•16 views

Projectworlds Car Rental Project SQL注入漏洞

Projectworlds Car Rental Project is a car rental project of the Indian company Projectworlds. Version 1.0 of the Projectworlds Car Rental Project has a SQL injection vulnerability, which arises from improper handling of the parameter fname in the file/bookcar.php, potentially leading to SQL...

7.5CVSS7.2AI score0.00411EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/04/06 12:00 a.m.•18 views

PT-2026-30579

A vulnerability was identified in projectworlds Car Rental Project 1.0. Affected by this vulnerability is an unknown functionality of the file /book car.php of the component Parameter Handler. The manipulation of the argument fname leads to sql injection. The attack can be initiated remotely. The...

7.5CVSS6.9AI score0.00411EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/06 12:00 a.m.•1 views

CVE-2026-5634: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in projectworlds Car Rental Project 1.0. Affected by this vulnerability is an unknown functionality of the file /bookcar.php of the component Parameter Handler. The manipulation of the argument fname leads to sql injection. The attack can be initiated remotely. The...

7.5CVSS7.1AI score0.00411EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/04/05 6:30 p.m.•16 views

EUVD-2026-19107

A vulnerability was determined in CodeAstro Online Classroom 1.0. This issue affects some unknown processing of the file /OnlineClassroom/updatedetailsfromfaculty.php?myfid=108 of the component Parameter Handler. Executing a manipulation of the argument fname can lead to sql injection. The attack...

6.5CVSS6.5AI score0.00316EPSS
SaveExploits0References6
NVD
NVD
•added 2026/04/05 4:16 p.m.•18 views

CVE-2026-5579

A vulnerability was determined in CodeAstro Online Classroom 1.0. This issue affects some unknown processing of the file /OnlineClassroom/updatedetailsfromfaculty.php?myfid=108 of the component Parameter Handler. Executing a manipulation of the argument fname can lead to sql injection. The attack...

6.5CVSS0.00316EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/04/05 4:00 p.m.•47 views

CVE-2026-5579 CodeAstro Online Classroom Parameter updatedetailsfromfaculty.php sql injection

A vulnerability was determined in CodeAstro Online Classroom 1.0. This issue affects some unknown processing of the file /OnlineClassroom/updatedetailsfromfaculty.php?myfid=108 of the component Parameter Handler. Executing a manipulation of the argument fname can lead to sql injection. The attack...

6.5CVSS0.00316EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2026/04/05 4:00 p.m.•10 views

CVE-2026-5579

A vulnerability was determined in CodeAstro Online Classroom 1.0. This issue affects some unknown processing of the file /OnlineClassroom/updatedetailsfromfaculty.php?myfid=108 of the component Parameter Handler. Executing a manipulation of the argument fname can lead to sql injection. The attack...

6.5CVSS6.5AI score0.00316EPSS
SaveExploits0References5Affected Software1
Vulnrichment
Vulnrichment
•added 2026/04/05 4:00 p.m.•8 views

CVE-2026-5579 CodeAstro Online Classroom Parameter updatedetailsfromfaculty.php sql injection

A vulnerability was determined in CodeAstro Online Classroom 1.0. This issue affects some unknown processing of the file /OnlineClassroom/updatedetailsfromfaculty.php?myfid=108 of the component Parameter Handler. Executing a manipulation of the argument fname can lead to sql injection. The attack...

6.5CVSS6.4AI score0.00316EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2026/04/05 12:00 a.m.•19 views

CodeAstro Online Classroom SQL注入漏洞

CodeAstro Online Classroom is an online classroom platform provided by CodeAstro Inc. Version 1.0 of CodeAstro Online Classroom has a SQL injection vulnerability. This vulnerability arises from incorrect handling of the parameter fname in the file /OnlineClassroom/updatedetailsfromfaculty.php,...

6.5CVSS6.6AI score0.00316EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/05 12:00 a.m.•1 views

CVE-2026-5579: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in CodeAstro Online Classroom 1.0. This issue affects some unknown processing of the file /OnlineClassroom/updatedetailsfromfaculty.php?myfid=108 of the component Parameter Handler. Executing a manipulation of the argument fname can lead to sql injection. The attack...

6.5CVSS6.4AI score0.00316EPSS
SaveExploits0References3
NVD
NVD
•added 2026/03/22 2:16 p.m.•20 views

CVE-2026-4550

A vulnerability has been found in code-projects Simple Gym Management System up to 1.0. This affects an unknown part of the file /gym/func.php. Such manipulation of the argument Trainerid/fname leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the publ...

5.8CVSS0.00349EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2026/03/22 1:47 p.m.•6 views

CVE-2026-4550 code-projects Simple Gym Management System func.php sql injection

A vulnerability has been found in code-projects Simple Gym Management System up to 1.0. This affects an unknown part of the file /gym/func.php. Such manipulation of the argument Trainerid/fname leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the publ...

5.8CVSS5.3AI score0.00349EPSS
SaveExploits0References7
CVE
CVE
•added 2026/03/22 1:47 p.m.•41 views

CVE-2026-4550

CVE-2026-4550 affects code-projects’ Simple Gym Management System (

5.8CVSS5.2AI score0.00349EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2026/03/22 1:47 p.m.•64 views

CVE-2026-4550 code-projects Simple Gym Management System func.php sql injection

A vulnerability has been found in code-projects Simple Gym Management System up to 1.0. This affects an unknown part of the file /gym/func.php. Such manipulation of the argument Trainerid/fname leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the publ...

5.8CVSS0.00349EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2026/03/22 12:00 a.m.•19 views

Code-Projects Simple Gym Management System SQL注入漏洞

Code-Projects Simple Gym Management System is an open-source gym management system developed by Code-Projects. Versions of Code-Projects Simple Gym Management System prior to 1.0 contained a SQL injection vulnerability. This vulnerability stemmed from incorrect operations with the parameters...

5.8CVSS5.9AI score0.00349EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/22 12:00 a.m.•3 views

CVE-2026-4550: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in code-projects Simple Gym Management System up to 1.0. This affects an unknown part of the file /gym/func.php. Such manipulation of the argument Trainerid/fname leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the publ...

5.8CVSS5.2AI score0.00349EPSS
SaveExploits0References1
GithubExploit
GithubExploit
•added 2026/03/16 6:13 a.m.•214 views

Exploit for Path Traversal in Apple Safari

CVE-2026-20660 PoC Bundle This folder packages a standalone p...

7.5CVSS5.8AI score0.00806EPSS
SaveExploits1
RedhatCVE
RedhatCVE
•added 2026/03/03 7:42 a.m.•30 views

CVE-2026-3406

A vulnerability was found in projectworlds Online Art Gallery Shop 1.0. The impacted element is an unknown function of the file /admin/registration.php of the component Registration Handler. The manipulation of the argument fname results in sql injection. It is possible to launch the attack...

9.8CVSS5.7AI score0.00594EPSS
SaveExploits1References1
NVD
NVD
•added 2026/03/02 3:16 a.m.•21 views

CVE-2026-3406

A vulnerability was found in projectworlds Online Art Gallery Shop 1.0. The impacted element is an unknown function of the file /admin/registration.php of the component Registration Handler. The manipulation of the argument fname results in sql injection. It is possible to launch the attack...

9.8CVSS0.00594EPSS
SaveExploits1References4
OSV
OSV
•added 2026/03/02 3:16 a.m.•19 views

CVE-2026-3406

A vulnerability was found in projectworlds Online Art Gallery Shop 1.0. The impacted element is an unknown function of the file /admin/registration.php of the component Registration Handler. The manipulation of the argument fname results in sql injection. It is possible to launch the attack...

9.8CVSS5.7AI score0.00594EPSS
SaveExploits1References4
Rows per page
Query Builder