CVE-2026-86518

A time-based blind SQL injection vulnerability exists in the code-projects Student Crud Operation 1.0 application, specifically in the /edit.php file via the id parameter. The vulnerability is remotely exploitable with low privileges required (authenticated user) and no user interaction needed. P...

CVE-2026-86517 itsourcecode Sales and Inventory System us_searchfrm.php mysqli_query sql injection

A flaw has been found in itsourcecode Sales and Inventory System 1.0. The impacted element is the function mysqliquery of the file /pages/ussearchfrm.php. Executing a manipulation of the argument ID can lead to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2026-86517

A SQL injection vulnerability exists in itsourcecode Sales and Inventory System version 1.0 , specifically in the mysqli_query function within /pages/us_searchfrm.php. Manipulating the ID parameter allows a remote, authenticated attacker to inject arbitrary SQL, resulting in low impact to confide...

CVE-2021-42670

CVE-2021-42670 CVE-2021-42670 - エンジニアオンラインポータルシステムにおけるSQLインジェクションの脆弱性。 技術的説明: エンジニアオンラインポータルにSQLインジェクションの脆弱性が存在します。攻撃者は、「announcementsstudent.php」ウェブページの脆弱な「id」パラメータを利用して、実行されるSQLクエリを操作できます。 その結果、攻撃者はウェブサーバーから機密データを抽出できます。 影響を受けるコンポーネント - 脆弱なページ - announcementsstudent.php 脆弱なパラメータ - "id" 悪用手順: 1...

CVE-2026-86310 itsourcecode Sales and Inventory System cust_edit1.php sql injection

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/custedit1.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the publ...

CVE-2026-86310

itsourcecode Sales and Inventory System 1.0 contains a SQL injection vulnerability in the file /pages/cust_edit1.php , triggered by manipulating the ID argument. The attack can be launched remotely with low privileges and no user interaction. A proof-of-concept exploit has been disclosed to the p...

CVE-2026-86309 itsourcecode Sales and Inventory System pro_searchfrm.php sql injection

A flaw has been found in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/prosearchfrm.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used...

CVE-2020-17530

これは何ですか これはS2-061の脆弱性の詳細を分析するためのシンプルなテストプロジェクトです。 使用方法 ステップ1：IDEAを使用してこのプロジェクトをインポートする ステップ2：Tomcatサーバーをセットアップする ステップ3：ブラウザで次のURLにアクセスする："http://192.168.174.149:8080/SimpleStrutswarexploded/S2061.action?id=%25%7b8%2a8%7d" エクスプロイト方法 SSRFテスト root@kitploit: POST /SimpleStrutswarexploded/S2061.action...

CVE-2026-86301

A vulnerability has been found in code-projects Hospital Information System 1.0. Affected is an unknown function of the file /HIS/src/patients/editPatient.php of the component Patient Management. Such manipulation of the argument ID leads to cross site scripting. The attack may be launched...

EUVD-2026-72353

A vulnerability has been found in code-projects Hospital Information System 1.0. Affected is an unknown function of the file /HIS/src/patients/editPatient.php of the component Patient Management. Such manipulation of the argument ID leads to cross site scripting. The attack may be launched...

CVE-2026-86301 code-projects Hospital Information System Patient Management editPatient.php cross site scripting

A vulnerability has been found in code-projects Hospital Information System 1.0. Affected is an unknown function of the file /HIS/src/patients/editPatient.php of the component Patient Management. Such manipulation of the argument ID leads to cross site scripting. The attack may be launched...

CVE-2026-86298

A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. Impacted is an unknown function of the file /deletesubject.php. Performing a manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2026-86298

CVE-2026-86298 affects SourceCodester Class and Exam Timetabling System 1.0 , where an unauthenticated remote attacker can exploit a SQL injection vulnerability in the /delete_subject.php file by manipulating the ID parameter. The flaw is rated CVSS 3.1: 7.3 (HIGH) with low impact on confidential...

CVE-2026-86298 SourceCodester Class and Exam Timetabling System delete_subject.php sql injection

A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. Impacted is an unknown function of the file /deletesubject.php. Performing a manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2026-86291

A security vulnerability has been detected in itsourcecode Sales and Inventory System 1.0. This impacts an unknown function of the file /pages/usedit1.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed publicly and...

EUVD-2026-72320

A security vulnerability has been detected in itsourcecode Sales and Inventory System 1.0. This impacts an unknown function of the file /pages/usedit1.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed publicly and...

CVE-2026-86291 itsourcecode Sales and Inventory System us_edit1.php sql injection

A security vulnerability has been detected in itsourcecode Sales and Inventory System 1.0. This impacts an unknown function of the file /pages/usedit1.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed publicly and...

CVE-2026-86291

itsourcecode Sales and Inventory System 1.0 is affected by a SQL injection in the file /pages/us_edit1.php via manipulation of the ID parameter. The vulnerability is exploitable remotely and requires low privileges with no user interaction. A proof-of-concept exploit has been disclosed publicly, ...

CVE-2026-86277

A vulnerability has been found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. Impacted is an unknown function of the file deleteexam.php. The manipulation of the argument ID leads to authorization bypass. The attack is possible to be carried out remotely. The...

CVE-2026-86277

An authorization bypass vulnerability in SourceCodester Syllabus-Alabeled Learning Management & Examination System 1.0 affects the delete_exam.php file. Manipulating the ID argument allows a remote attacker to bypass authorization controls, leading to an Insecure Direct Object Reference (IDOR) / ...