Lucene search
+L

32 matches found

CVE
CVE
•added 2026/10/06 1:00 p.m.•19 views

CVE-2026-105919

A SQL injection vulnerability exists in the Administrator Login Endpoint of the Kusalkasilva Learning-Management-System (up to commit ffeb873f8803f1e9664384ff75000c7da45466d2). The flaw is located in the mysql_query function within admin/login.php, where improper handling of the username and pass...

7.5CVSS6.7AI score0.00263EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/10/06 1:00 p.m.•15 views

EUVD-2026-93381

A vulnerability was found in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. The affected element is the function mysqlquery of the file admin/login.php of the component Administrator Login Endpoint. The manipulation of the argument username/password result...

7.5CVSS6.7AI score0.00263EPSS
SaveExploits0References6
NVD
NVD
•added 2026/10/06 12:16 p.m.•11 views

CVE-2026-105918

A vulnerability has been found in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. Impacted is the function mysqlerror of the file login.php of the component Login Endpoint. The manipulation of the argument username/password leads to sql injection. The attac...

7.5CVSS0.00263EPSS
SaveExploits0References6
CVE
CVE
•added 2026/10/06 11:45 a.m.•13 views

CVE-2026-105918

A SQL injection vulnerability exists in the Login Endpoint of the Kusalkasilva Learning-Management-System (up to commit ffeb873f8803f1e9664384ff75000c7da45466d2). The flaw is located in the mysql_error function within the login.php file. Attackers can initiate this attack remotely by manipulating...

7.5CVSS6.7AI score0.00263EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/10/06 11:45 a.m.•10 views

EUVD-2026-93372

A vulnerability has been found in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. Impacted is the function mysqlerror of the file login.php of the component Login Endpoint. The manipulation of the argument username/password leads to sql injection. The attac...

7.5CVSS6.7AI score0.00263EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/06 11:45 a.m.•35 views

CVE-2026-105918 Kusalkasilva Learning-Management-System Login Endpoint login.php mysql_error sql injection

A vulnerability has been found in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. Impacted is the function mysqlerror of the file login.php of the component Login Endpoint. The manipulation of the argument username/password leads to sql injection. The attac...

7.5CVSS0.00263EPSS
SaveExploits0References6
OSV
OSV
•added 2026/10/06 11:45 a.m.•3 views

CVE-2026-105918 Kusalkasilva Learning-Management-System Login Endpoint login.php mysql_error sql injection

A vulnerability has been found in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. Impacted is the function mysqlerror of the file login.php of the component Login Endpoint. The manipulation of the argument username/password leads to sql injection. The attac...

6.9CVSS5.4AI score
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•11 views

PT-2026-106712

A vulnerability has been found in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. Impacted is the function mysql error of the file login.php of the component Login Endpoint. The manipulation of the argument username/password leads to sql injection. The atta...

7.5CVSS6.7AI score0.00263EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•7 views

PT-2026-106758

A vulnerability was identified in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. This affects an unknown function of the file search class.php. Such manipulation of the argument school year leads to sql injection. The attack may be launched remotely. The...

6.5CVSS6.3AI score0.002EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/06 12:00 a.m.•7 views

CVE-2026-105920: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. The impacted element is an unknown function of the file studentsignup.php of the component Student Registration Endpoint. This manipulation causes sql injection. The attack ma...

7.5CVSS6.7AI score0.00263EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•10 views

PT-2026-106728

Name of the Vulnerable Software and Affected Versions Kusalkasilva Learning-Management-System versions up to ffeb873f8803f1e9664384ff75000c7da45466d2 Description A remote SQL injection exists within the Student Registration Endpoint component, specifically affecting an unknown function in the...

7.5CVSS7AI score0.00263EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•13 views

PT-2026-106719

A vulnerability was found in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. The affected element is the function mysql query of the file admin/login.php of the component Administrator Login Endpoint. The manipulation of the argument username/password resul...

7.5CVSS6.7AI score0.00263EPSS
SaveExploits0References7
Rows per page
Query Builder