Lucene search
+L

6939 matches found

Cvelist
Cvelist
added 2026/09/06 9:30 a.m.42 views

CVE-2026-86209 SourceCodester Class and Exam Timetabling System delete_user.php sql injection

A weakness has been identified in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function of the file /deleteuser.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been made available to the public a...

7.5CVSS0.00412EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/09/06 9:30 a.m.9 views

EUVD-2026-72088

A weakness has been identified in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function of the file /deleteuser.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been made available to the public a...

7.5CVSS7.1AI score0.00412EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/09/06 9:15 a.m.9 views

EUVD-2026-72087

A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. This impacts an unknown function of the file /deleteteacher.php. The manipulation of the argument ID results in sql injection. The attack can be launched remotely. The exploit has been released to the...

7.5CVSS7.1AI score0.0033EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/09/06 9:15 a.m.43 views

CVE-2026-86208 SourceCodester Class and Exam Timetabling System delete_teacher.php sql injection

A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. This impacts an unknown function of the file /deleteteacher.php. The manipulation of the argument ID results in sql injection. The attack can be launched remotely. The exploit has been released to the...

7.5CVSS0.0033EPSS
SaveExploits0References6
CVE
CVE
added 2026/09/06 9:15 a.m.17 views

CVE-2026-86208

A SQL injection vulnerability exists in SourceCodester Class and Exam Timetabling System 1.0 , specifically in the file /delete_teacher.php . The flaw is triggered by manipulating the ID argument, allowing an unauthenticated remote attacker to execute arbitrary SQL queries. The impact is rated HI...

7.5CVSS7.1AI score0.0033EPSS
SaveExploits0References6
NVD
NVD
added 2026/09/06 8:16 a.m.7 views

CVE-2026-86172

A vulnerability was detected in DefaultFuction CRM 1.0.0. This impacts an unknown function of the file /modules/customers/delete.php. Performing a manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and may be used...

6.5CVSS0.00196EPSS
SaveExploits0References5
CVE
CVE
added 2026/09/06 7:30 a.m.12 views

CVE-2026-86172

CVE-2026-86172 is an SQL injection vulnerability in DefaultFuction CRM version 1.0.0 , located in the file /modules/customers/delete.php . An attacker can manipulate the ID argument to inject SQL commands, enabling remote exploitation with low privileges required and no user interaction. The CVSS...

6.5CVSS6.5AI score0.00196EPSS
SaveExploits0References5
OSV
OSV
added 2026/09/06 7:30 a.m.1 views

CVE-2026-86172 DefaultFuction CRM delete.php sql injection

A vulnerability was detected in DefaultFuction CRM 1.0.0. This impacts an unknown function of the file /modules/customers/delete.php. Performing a manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and may be used...

5.3CVSS5.8AI score
SaveExploits0References7
NVD
NVD
added 2026/09/06 7:16 a.m.6 views

CVE-2026-86171

A security vulnerability has been detected in DefaultFuction CRM 1.0.0. This affects an unknown function of the file /modules/orders/delete.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be...

6.5CVSS0.00192EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/09/06 6:15 a.m.35 views

CVE-2026-86171 DefaultFuction CRM delete.php sql injection

A security vulnerability has been detected in DefaultFuction CRM 1.0.0. This affects an unknown function of the file /modules/orders/delete.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be...

6.5CVSS0.00192EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/09/06 6:15 a.m.6 views

EUVD-2026-72067

A security vulnerability has been detected in DefaultFuction CRM 1.0.0. This affects an unknown function of the file /modules/orders/delete.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be...

6.5CVSS6.5AI score0.00192EPSS
SaveExploits0References5
OSV
OSV
added 2026/09/06 6:15 a.m.4 views

CVE-2026-86171 DefaultFuction CRM delete.php sql injection

A security vulnerability has been detected in DefaultFuction CRM 1.0.0. This affects an unknown function of the file /modules/orders/delete.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be...

5.3CVSS5.7AI score
SaveExploits0References7
CVE
CVE
added 2026/09/06 6:15 a.m.12 views

CVE-2026-86171

DefaultFuction CRM 1.0.0 is affected by a SQL injection vulnerability in the file /modules/orders/delete.php, triggered by manipulation of the ID argument. The attack is remotely exploitable over the network with low privileges required and no user interaction. The exploit has been publicly discl...

6.5CVSS6.5AI score0.00192EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/09/06 5:45 a.m.6 views

EUVD-2026-72059

A weakness has been identified in DefaultFuction CRM 1.0.0. The impacted element is an unknown function of the file /modules/orders/edit.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the...

6.5CVSS6.5AI score0.00192EPSS
SaveExploits0References5
OSV
OSV
added 2026/09/06 5:45 a.m.2 views

CVE-2026-86170 DefaultFuction CRM edit.php sql injection

A weakness has been identified in DefaultFuction CRM 1.0.0. The impacted element is an unknown function of the file /modules/orders/edit.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the...

5.3CVSS5.7AI score
SaveExploits0References7
CVE
CVE
added 2026/09/06 5:45 a.m.22 views

CVE-2026-86170

A SQL injection vulnerability exists in DefaultFuction CRM 1.0.0 , specifically in the file /modules/orders/edit.php. The ID parameter is unsafely manipulated, allowing a remote attacker with low privileges to execute arbitrary SQL commands without user interaction. The vulnerability carries a CV...

6.5CVSS6.5AI score0.00192EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/09/06 5:45 a.m.47 views

CVE-2026-86170 DefaultFuction CRM edit.php sql injection

A weakness has been identified in DefaultFuction CRM 1.0.0. The impacted element is an unknown function of the file /modules/orders/edit.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the...

6.5CVSS0.00192EPSS
SaveExploits0References5
NVD
NVD
added 2026/09/06 3:17 a.m.9 views

CVE-2026-86159

A flaw has been found in SourceCodester Online Voting System 1.0. Impacted is an unknown function of the file /ajax.php?action=saveuser. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used...

7.5CVSS0.00263EPSS
SaveExploits0References6
NVD
NVD
added 2026/09/06 3:17 a.m.8 views

CVE-2026-86160

A vulnerability has been found in SourceCodester Online Voting System 1.0. The affected element is an unknown function of the file /ajax.php?action=deletevoting. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the...

7.5CVSS0.00263EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/09/06 3:15 a.m.6 views

EUVD-2026-72048

A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/transview.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit has been released to the public...

6.5CVSS6.5AI score0.00204EPSS
SaveExploits0References6
Rows per page
Query Builder