Lucene search
+L

914 matches found

CVE
CVE
•added 2026/10/12 8:15 p.m.•5 views

CVE-2026-108928

The itsourcecode Online Admission System 1.0 is vulnerable to SQL injection due to improper processing of the ID argument within the /admin/sum.php file. This flaw allows for remote execution of the attack. The exploit has been disclosed publicly and may be used. No specific remediation or exploi...

6.5CVSS6.5AI score
SaveExploits0References6
NVD
NVD
•added 2026/10/05 4:17 a.m.•15 views

CVE-2026-105187

A vulnerability has been found in itsourcecode Online Admission System 1.0. Affected is an unknown function of the file /admin/key.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used...

6.5CVSS0.002EPSS
SaveExploits0References6
NVD
NVD
•added 2026/10/05 3:16 a.m.•12 views

CVE-2026-105184

A security vulnerability has been detected in itsourcecode Online Admission System 1.0. The impacted element is an unknown function of the file /admin/creteria.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

7.5CVSS0.00263EPSS
SaveExploits0References6
CVE
CVE
•added 2026/10/05 3:00 a.m.•15 views

CVE-2026-105184

A security vulnerability exists in itsourcecode Online Admission System 1.0 within an unknown function of the /admin/creteria.php file. Improper handling of the ID argument allows for a SQL injection attack, which can be launched remotely. Public exploits for this vulnerability have been disclose...

7.5CVSS7AI score0.00263EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/10/05 12:00 a.m.•8 views

PT-2026-104716

A vulnerability has been found in itsourcecode Online Admission System 1.0. Affected is an unknown function of the file /admin/key.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used...

6.5CVSS6.5AI score0.002EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/05 12:00 a.m.•10 views

CVE-2026-105187: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in itsourcecode Online Admission System 1.0. Affected is an unknown function of the file /admin/key.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used...

6.5CVSS6.5AI score0.002EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/05 12:00 a.m.•12 views

PT-2026-104670

A vulnerability was determined in SourceCodester Drug Recommendation System 1.0. Impacted is an unknown function of the file /Admin/edit class.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed...

5.8CVSS5.5AI score0.00318EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/10/04 2:00 a.m.•11 views

CVE-2026-105097 Omega Solution CoinEx Crypto Customer Information API customer-currency authorization

A vulnerability was identified in Omega Solution CoinEx Crypto 2025. This impacts an unknown function of the file /customer-currency/ of the component Customer Information API. The manipulation of the argument ID leads to authorization bypass. Remote exploitation of the attack is possible. The...

5.3CVSS5.1AI score0.00294EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/10/04 2:00 a.m.•29 views

EUVD-2026-92063

A vulnerability was identified in Omega Solution CoinEx Crypto 2025. This impacts an unknown function of the file /customer-currency/ of the component Customer Information API. The manipulation of the argument ID leads to authorization bypass. Remote exploitation of the attack is possible. The...

5.3CVSS5.1AI score0.00294EPSS
SaveExploits0References5
CVE
CVE
•added 2026/10/04 2:00 a.m.•34 views

CVE-2026-105097

A vulnerability exists in the Customer Information API of Omega Solution CoinEx Crypto 2025 . The issue resides in an unknown function within the /customer-currency/ file, where manipulating the ID argument results in an authorization bypass . Remote exploitation is possible, and a public exploit...

5.3CVSS5.1AI score0.00294EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/10/04 12:45 a.m.•24 views

EUVD-2026-92059

A vulnerability was determined in Omega Solution CoinEx Crypto 2025. This affects an unknown function of the file /customer/ of the component Customer Profile API. Executing a manipulation of the argument ID can lead to authorization bypass. The attack may be launched remotely. The exploit has be...

6.5CVSS6AI score0.00285EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/04 12:00 a.m.•12 views

CVE-2026-105096: Authorization Bypass Through User-Controlled Key

A vulnerability was determined in Omega Solution CoinEx Crypto 2025. This affects an unknown function of the file /customer/ of the component Customer Profile API. Executing a manipulation of the argument ID can lead to authorization bypass. The attack may be launched remotely. The exploit has be...

6.5CVSS6AI score0.00285EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/04 12:00 a.m.•13 views

CVE-2026-105097: Authorization Bypass Through User-Controlled Key

A vulnerability was identified in Omega Solution CoinEx Crypto 2025. This impacts an unknown function of the file /customer-currency/ of the component Customer Information API. The manipulation of the argument ID leads to authorization bypass. Remote exploitation of the attack is possible. The...

5.3CVSS5.1AI score0.00294EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/04 12:00 a.m.•15 views

PT-2026-104597

A vulnerability was determined in Omega Solution CoinEx Crypto 2025. This affects an unknown function of the file /customer/ of the component Customer Profile API. Executing a manipulation of the argument ID can lead to authorization bypass. The attack may be launched remotely. The exploit has be...

6.5CVSS6AI score0.00285EPSS
SaveExploits0References6
NVD
NVD
•added 2026/10/02 3:17 p.m.•15 views

CVE-2026-104638

A security vulnerability has been detected in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. The impacted element is an unknown function of the file php/sessions.php. The manipulation of the argument ID leads to improper authentication. Remote exploitatio...

6.9CVSS0.00429EPSS
SaveExploits0References6
OSV
OSV
•added 2026/10/02 3:00 p.m.•6 views

CVE-2026-104638 onetwothreeneth HospitalManagementSystem sessions.php improper authentication

A security vulnerability has been detected in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. The impacted element is an unknown function of the file php/sessions.php. The manipulation of the argument ID leads to improper authentication. Remote exploitatio...

6.9CVSS5.3AI score
SaveExploits0References8
NVD
NVD
•added 2026/10/02 2:17 p.m.•14 views

CVE-2026-104613

A vulnerability was determined in CodeAstro Simple Pharmacy Management System 1.0. This vulnerability affects unknown code of the file /SimplePharmacy-PHP/product/view.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been public...

6.5CVSS0.002EPSS
SaveExploits0References6
CVE
CVE
•added 2026/10/02 1:15 p.m.•18 views

CVE-2026-104613

The CodeAstro Simple Pharmacy Management System 1.0 is vulnerable to an SQL injection vulnerability within the /SimplePharmacy-PHP/product/view.php file. The root cause is the improper manipulation of the ID argument , which allows for remote execution of the attack. The exploit has been publicly...

6.5CVSS6.5AI score0.002EPSS
SaveExploits0References6
CVE
CVE
•added 2026/10/02 10:30 a.m.•13 views

CVE-2026-104606

A security flaw exists in the itsourcecode Online Admission System Project 1.0 . An unknown function within the confirm.php file is vulnerable to SQL injection due to the improper handling of the ID argument. This vulnerability can be exploited remotely. The documents indicate that an exploit has...

6.5CVSS6.5AI score0.0025EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/10/02 12:00 a.m.•5 views

PT-2026-104194

A security flaw has been discovered in itsourcecode Online Admission System Project 1.0. The impacted element is an unknown function of the file confirm.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been released to the...

6.5CVSS6.5AI score0.0025EPSS
SaveExploits0References7
Rows per page
Query Builder