6939 matches found
CVE-2026-86209 SourceCodester Class and Exam Timetabling System delete_user.php sql injection
A weakness has been identified in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function of the file /deleteuser.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been made available to the public a...
EUVD-2026-72088
A weakness has been identified in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function of the file /deleteuser.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been made available to the public a...
EUVD-2026-72087
A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. This impacts an unknown function of the file /deleteteacher.php. The manipulation of the argument ID results in sql injection. The attack can be launched remotely. The exploit has been released to the...
CVE-2026-86208 SourceCodester Class and Exam Timetabling System delete_teacher.php sql injection
A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. This impacts an unknown function of the file /deleteteacher.php. The manipulation of the argument ID results in sql injection. The attack can be launched remotely. The exploit has been released to the...
CVE-2026-86208
A SQL injection vulnerability exists in SourceCodester Class and Exam Timetabling System 1.0 , specifically in the file /delete_teacher.php . The flaw is triggered by manipulating the ID argument, allowing an unauthenticated remote attacker to execute arbitrary SQL queries. The impact is rated HI...
CVE-2026-86172
A vulnerability was detected in DefaultFuction CRM 1.0.0. This impacts an unknown function of the file /modules/customers/delete.php. Performing a manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and may be used...
CVE-2026-86172
CVE-2026-86172 is an SQL injection vulnerability in DefaultFuction CRM version 1.0.0 , located in the file /modules/customers/delete.php . An attacker can manipulate the ID argument to inject SQL commands, enabling remote exploitation with low privileges required and no user interaction. The CVSS...
CVE-2026-86172 DefaultFuction CRM delete.php sql injection
A vulnerability was detected in DefaultFuction CRM 1.0.0. This impacts an unknown function of the file /modules/customers/delete.php. Performing a manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and may be used...
CVE-2026-86171
A security vulnerability has been detected in DefaultFuction CRM 1.0.0. This affects an unknown function of the file /modules/orders/delete.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be...
CVE-2026-86171 DefaultFuction CRM delete.php sql injection
A security vulnerability has been detected in DefaultFuction CRM 1.0.0. This affects an unknown function of the file /modules/orders/delete.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be...
CVE-2026-86171 DefaultFuction CRM delete.php sql injection
A security vulnerability has been detected in DefaultFuction CRM 1.0.0. This affects an unknown function of the file /modules/orders/delete.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be...
EUVD-2026-72067
A security vulnerability has been detected in DefaultFuction CRM 1.0.0. This affects an unknown function of the file /modules/orders/delete.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be...
CVE-2026-86171
DefaultFuction CRM 1.0.0 is affected by a SQL injection vulnerability in the file /modules/orders/delete.php, triggered by manipulation of the ID argument. The attack is remotely exploitable over the network with low privileges required and no user interaction. The exploit has been publicly discl...
EUVD-2026-72059
A weakness has been identified in DefaultFuction CRM 1.0.0. The impacted element is an unknown function of the file /modules/orders/edit.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the...
CVE-2026-86170 DefaultFuction CRM edit.php sql injection
A weakness has been identified in DefaultFuction CRM 1.0.0. The impacted element is an unknown function of the file /modules/orders/edit.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the...
CVE-2026-86170
A SQL injection vulnerability exists in DefaultFuction CRM 1.0.0 , specifically in the file /modules/orders/edit.php. The ID parameter is unsafely manipulated, allowing a remote attacker with low privileges to execute arbitrary SQL commands without user interaction. The vulnerability carries a CV...
CVE-2026-86170 DefaultFuction CRM edit.php sql injection
A weakness has been identified in DefaultFuction CRM 1.0.0. The impacted element is an unknown function of the file /modules/orders/edit.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the...
CVE-2026-86159
A flaw has been found in SourceCodester Online Voting System 1.0. Impacted is an unknown function of the file /ajax.php?action=saveuser. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used...
CVE-2026-86160
A vulnerability has been found in SourceCodester Online Voting System 1.0. The affected element is an unknown function of the file /ajax.php?action=deletevoting. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the...
EUVD-2026-72048
A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/transview.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit has been released to the public...