Lucene search
+L

8 matches found

NVD
NVD
added 2026/09/15 6:17 a.m.7 views

CVE-2026-91004

A vulnerability has been found in SourceCodester Online Faculty Clearance System 1.0. The impacted element is an unknown function of the file /deletefaculty1.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to th...

7.5CVSS0.00263EPSS
SaveExploits0References6
CVE
CVE
added 2026/09/15 6:15 a.m.5 views

CVE-2026-91005

SourceCodester Online Faculty Clearance System 1.0 is vulnerable to an unrestricted file upload in the Profile Picture Upload component. The flaw resides in the move_uploaded_file function within production/edit_picture.php , where manipulation of the File argument allows an attacker to upload ar...

6.5CVSS0.00209EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/09/15 6:15 a.m.5 views

EUVD-2026-78299

A vulnerability was found in SourceCodester Online Faculty Clearance System 1.0. This affects the function moveuploadedfile of the file production/editpicture.php of the component Profile Picture Upload. Performing a manipulation of the argument File results in unrestricted upload. The attack is...

6.5CVSS0.00209EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/09/15 6:00 a.m.9 views

CVE-2026-91004 SourceCodester Online Faculty Clearance System delete_faculty1.php sql injection

A vulnerability has been found in SourceCodester Online Faculty Clearance System 1.0. The impacted element is an unknown function of the file /deletefaculty1.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to th...

7.5CVSS0.00263EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/09/15 6:00 a.m.4 views

EUVD-2026-78283

A vulnerability has been found in SourceCodester Online Faculty Clearance System 1.0. The impacted element is an unknown function of the file /deletefaculty1.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to th...

7.5CVSS0.00263EPSS
SaveExploits0References6
CVE
CVE
added 2026/09/15 4:00 a.m.10 views

CVE-2026-90877

A SQL injection vulnerability exists in the file /update_requirement_status.php of SourceCodester Online Faculty Clearance System 1.0 . The unsanitized haydi parameter allows a remote, unauthenticated attacker to manipulate the database. The CVSS v3.1 base score is 7.3 (High) with low impact on c...

7.5CVSS0.00263EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/09/15 4:00 a.m.9 views

CVE-2026-90877 SourceCodester Online Faculty Clearance System update_requirement_status.php sql injection

A vulnerability was found in SourceCodester Online Faculty Clearance System 1.0. Affected by this issue is some unknown functionality of the file /updaterequirementstatus.php. The manipulation of the argument haydi results in sql injection. It is possible to launch the attack remotely. The exploi...

7.5CVSS0.00263EPSS
SaveExploits0References6
CVE
CVE
added 2026/09/15 3:45 a.m.9 views

CVE-2026-90876

A SQL injection vulnerability affects SourceCodester Online Faculty Clearance System 1.0 , specifically in the file /delete_requirement.php through manipulation of the ID parameter. The vulnerability can be exploited remotely with no authentication and low complexity , yielding a CVSS 3.1 base sc...

7.5CVSS0.00269EPSS
SaveExploits0References6
Rows per page
Query Builder