Lucene search
+L

870 matches found

EUVD
EUVD
added 2026/01/29 12:31 a.m.14 views

EUVD-2026-4853

A weakness has been identified in itsourcecode School Management System 1.0. The affected element is an unknown function of the file /course/index.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been made availab...

7.5CVSS5.8AI score0.00393EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2026/01/29 12:00 a.m.17 views

PT-2026-5281

berliCRM 1.0.24 contains a SQL injection vulnerability in the 'src record' parameter that allows remote attackers to manipulate database queries. Attackers can inject malicious SQL code through a crafted POST request to the index.php endpoint to potentially extract or modify database information...

8.2CVSS6AI score0.00278EPSS
SaveExploits0References4
VulnCheck KEV
VulnCheck KEV
added 2026/01/29 12:00 a.m.9 views

VulnCheck KEV: CVE-2022-30777

Parallels H-Sphere 3.6.1713 allows XSS via the indexen.php from parameter...

6.1CVSS5.8AI score0.02296EPSS
SaveIn wildExploits0References2
OSV
OSV
added 2026/01/28 10:15 p.m.6 views

CVE-2026-1545

A weakness has been identified in itsourcecode School Management System 1.0. The affected element is an unknown function of the file /course/index.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been made availab...

9.8CVSS5.7AI score0.00393EPSS
SaveExploits1References5
NVD
NVD
added 2026/01/28 10:15 p.m.10 views

CVE-2026-1545

A weakness has been identified in itsourcecode School Management System 1.0. The affected element is an unknown function of the file /course/index.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been made availab...

9.8CVSS0.00393EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
added 2026/01/27 9:24 a.m.16 views

CVE-2026-1422

A vulnerability was found in code-projects Online Examination System 1.0. Affected by this vulnerability is an unknown functionality of the file /index.php of the component Login Page. Performing a manipulation of the argument User results in sql injection. The attack is possible to be carried ou...

9.8CVSS6.8AI score0.00483EPSS
SaveExploits1References1
EUVD
EUVD
added 2026/01/26 6:02 a.m.9 views

EUVD-2026-4702

A vulnerability was found in code-projects Online Examination System 1.0. Affected by this vulnerability is an unknown functionality of the file /index.php of the component Login Page. Performing a manipulation of the argument User results in sql injection. The attack is possible to be carried ou...

7.5CVSS5.6AI score0.00483EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2026/01/26 6:02 a.m.11 views

CVE-2026-1422 code-projects Online Examination System Login Page index.php sql injection

A vulnerability was found in code-projects Online Examination System 1.0. Affected by this vulnerability is an unknown functionality of the file /index.php of the component Login Page. Performing a manipulation of the argument User results in sql injection. The attack is possible to be carried ou...

7.5CVSS5.6AI score0.00483EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2026/01/26 12:00 a.m.12 views

PT-2026-4727

Name of the Vulnerable Software and Affected Versions code-projects Online Examination System version 1.0 Description A flaw exists in the Online Examination System that allows for remote SQL injection. This occurs through manipulation of the User argument within the /index.php file, specifically...

9.8CVSS7.1AI score0.00483EPSS
SaveExploits1References12
CNNVD
CNNVD
added 2026/01/26 12:00 a.m.12 views

Code-Projects Online Examination System SQL Injection Vulnerability

Code-Projects Online Examination System is an open-source online examination system developed by Code-Projects. Version 1.0 of the Code-Projects Online Examination System has a SQL injection vulnerability. This vulnerability arises from incorrect handling of the User parameter in the...

9.8CVSS7.2AI score0.00483EPSS
SaveExploits1References6
EUVD
EUVD
added 2026/01/21 5:27 p.m.13 views

EUVD-2026-3620

Hestia Control Panel 1.3.2 contains an arbitrary file write vulnerability that allows authenticated attackers to write files to arbitrary locations using the API index.php endpoint. Attackers can exploit the v-make-tmp-file command to write SSH keys or other content to specific file paths on the...

8.8CVSS5.8AI score0.00437EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/01/21 5:27 p.m.37 views

CVE-2021-47871 Hestia Control Panel 1.3.2 - Arbitrary File Write

Hestia Control Panel 1.3.2 contains an arbitrary file write vulnerability that allows authenticated attackers to write files to arbitrary locations using the API index.php endpoint. Attackers can exploit the v-make-tmp-file command to write SSH keys or other content to specific file paths on the...

8.8CVSS0.00437EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/01/21 12:00 a.m.14 views

Hestia Control Panel security vulnerabilities

Hestia Control Panel is an open-source host control panel developed by Hestia. Version 1.3.2 of Hestia Control Panel contains a security vulnerability. This vulnerability stems from arbitrary file writing in the API index.php endpoint, which could allow authenticated attackers to write files...

8.8CVSS5.9AI score0.00437EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/01/20 4:21 p.m.15 views

CVE-2026-1160

A security vulnerability has been detected in PHPGurukul Directory Management System 1.0. Impacted is an unknown function of the file /index.php of the component Search. The manipulation of the argument searchdata leads to sql injection. The attack may be initiated remotely. The exploit has been...

9.8CVSS5.4AI score0.00339EPSS
SaveExploits1References1
OSV
OSV
added 2026/01/19 9:15 p.m.8 views

CVE-2026-1176

A security flaw has been discovered in itsourcecode School Management System 1.0. Affected is an unknown function of the file /subject/index.php. Performing a manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to...

9.8CVSS5.8AI score0.00339EPSS
SaveExploits1References5
NVD
NVD
added 2026/01/19 9:15 p.m.7 views

CVE-2026-1176

A security flaw has been discovered in itsourcecode School Management System 1.0. Affected is an unknown function of the file /subject/index.php. Performing a manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to...

9.8CVSS0.00339EPSS
SaveExploits1References5
EUVD
EUVD
added 2026/01/19 9:02 p.m.11 views

EUVD-2026-3195

A security flaw has been discovered in itsourcecode School Management System 1.0. Affected is an unknown function of the file /subject/index.php. Performing a manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to...

7.5CVSS5.5AI score0.00339EPSS
SaveExploits1References7
ATTACKERKB
ATTACKERKB
added 2026/01/19 9:02 p.m.5 views

CVE-2026-1176

A security flaw has been discovered in itsourcecode School Management System 1.0. Affected is an unknown function of the file /subject/index.php. Performing a manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to...

9.8CVSS5.4AI score0.00339EPSS
SaveExploits1References5Affected Software1
EUVD
EUVD
added 2026/01/19 3:32 p.m.12 views

EUVD-2026-3211

A security vulnerability has been detected in PHPGurukul Directory Management System 1.0. Impacted is an unknown function of the file /index.php of the component Search. The manipulation of the argument searchdata leads to sql injection. The attack may be initiated remotely. The exploit has been...

7.5CVSS5.5AI score0.00339EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2026/01/19 12:00 a.m.14 views

PHPGurukul Directory Management System SQL Injection Vulnerability

The PHPGurukul Directory Management System is a directory management system developed by PHPGurukul Corporation. Version 1.0 of the PHPGurukul Directory Management System has a SQL injection vulnerability. This vulnerability arises from incorrect handling of the parameter “searchdata” in the...

9.8CVSS7.2AI score0.00339EPSS
SaveExploits1References6
Rows per page
Query Builder