Lucene search
+L

35833 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/26 12:00 a.m.•1 views

CVE-2025-56605: Improper Neutralization of Input During Web Page Generation

A reflected Cross-Site Scripting XSS vulnerability exists in the register.php backend script of PuneethReddyHC Event Management System 1.0. The mobile POST parameter is improperly validated and echoed back in the HTTP response without sanitization, allowing an attacker to inject and execute...

5.4CVSS6.2AI score0.00192EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/02/26 12:00 a.m.•37 views

CVE-2025-56605

A reflected Cross-Site Scripting XSS vulnerability exists in the register.php backend script of PuneethReddyHC Event Management System 1.0. The mobile POST parameter is improperly validated and echoed back in the HTTP response without sanitization, allowing an attacker to inject and execute...

0.00192EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/02/25 9:30 a.m.•33 views

EUVD-2026-8628

A vulnerability was detected in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. Affected is an unknown function of the file /patient-search.php. The manipulation of the argument First Name/Last Name results in cross site scripting. The attack can be executed...

4.8CVSS4AI score0.0037EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2026/02/25 8:32 a.m.•9 views

CVE-2026-3171 SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System queue.php cross site scripting

A flaw has been found in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /queue.php. This manipulation of the argument firstname/lastname causes cross site scripting. The attack is possible to b...

5.1CVSS4AI score0.00349EPSS
SaveExploits1References4
OSV
OSV
•added 2026/02/25 8:16 a.m.•17 views

CVE-2026-3170

A vulnerability was detected in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. Affected is an unknown function of the file /patient-search.php. The manipulation of the argument First Name/Last Name results in cross site scripting. The attack can be executed...

4.8CVSS4.2AI score0.0037EPSS
SaveExploits1References4
EUVD
EUVD
•added 2026/02/25 6:31 a.m.•18 views

EUVD-2026-8511

A flaw has been found in itsourcecode College Management System 1.0. This issue affects some unknown processing of the file /admin/teacher-salary.php. This manipulation of the argument teacherid causes sql injection. It is possible to initiate the attack remotely. The exploit has been published a...

9.8CVSS5.4AI score0.00607EPSS
SaveExploits1References6
EUVD
EUVD
•added 2026/02/25 6:31 a.m.•25 views

EUVD-2026-8509

A vulnerability has been found in itsourcecode Document Management System 1.0. Impacted is an unknown function of the file /register.php. Such manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public a...

9.8CVSS5.4AI score0.00607EPSS
SaveExploits1References6
EUVD
EUVD
•added 2026/02/25 6:31 a.m.•15 views

EUVD-2026-8619

A weakness has been identified in itsourcecode College Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/asign-single-student-subjects.php. Executing a manipulation of the argument coursecode can lead to sql injection. The attack can be executed...

8.8CVSS5.4AI score0.00481EPSS
SaveExploits1References6
EUVD
EUVD
•added 2026/02/25 6:31 a.m.•15 views

EUVD-2026-8623

A security vulnerability has been detected in itsourcecode College Management System 1.0. This affects an unknown part of the file /admin/display-teacher.php. The manipulation of the argument teacherid leads to sql injection. The attack is possible to be carried out remotely. The exploit has been...

8.8CVSS5.4AI score0.00481EPSS
SaveExploits1References6
EUVD
EUVD
•added 2026/02/25 6:31 a.m.•26 views

EUVD-2026-8510

A vulnerability was detected in itsourcecode College Management System 1.0. This vulnerability affects unknown code of the file /login/login.php. The manipulation of the argument email results in sql injection. The attack may be performed from remote. The exploit is now public and may be used...

9.8CVSS5.4AI score0.00607EPSS
SaveExploits1References6
OSV
OSV
•added 2026/02/25 6:16 a.m.•12 views

CVE-2026-3152

A flaw has been found in itsourcecode College Management System 1.0. This issue affects some unknown processing of the file /admin/teacher-salary.php. This manipulation of the argument teacherid causes sql injection. It is possible to initiate the attack remotely. The exploit has been published a...

9.8CVSS5.7AI score0.00607EPSS
SaveExploits1References5
NVD
NVD
•added 2026/02/25 6:16 a.m.•19 views

CVE-2026-3152

A flaw has been found in itsourcecode College Management System 1.0. This issue affects some unknown processing of the file /admin/teacher-salary.php. This manipulation of the argument teacherid causes sql injection. It is possible to initiate the attack remotely. The exploit has been published a...

9.8CVSS0.00607EPSS
SaveExploits1References5
OSV
OSV
•added 2026/02/25 6:16 a.m.•14 views

CVE-2026-3151

A vulnerability was detected in itsourcecode College Management System 1.0. This vulnerability affects unknown code of the file /login/login.php. The manipulation of the argument email results in sql injection. The attack may be performed from remote. The exploit is now public and may be used...

9.8CVSS5.8AI score0.00607EPSS
SaveExploits1References5
NVD
NVD
•added 2026/02/25 6:16 a.m.•16 views

CVE-2026-3151

A vulnerability was detected in itsourcecode College Management System 1.0. This vulnerability affects unknown code of the file /login/login.php. The manipulation of the argument email results in sql injection. The attack may be performed from remote. The exploit is now public and may be used...

9.8CVSS0.00607EPSS
SaveExploits1References5
NVD
NVD
•added 2026/02/25 6:16 a.m.•19 views

CVE-2026-3153

A vulnerability has been found in itsourcecode Document Management System 1.0. Impacted is an unknown function of the file /register.php. Such manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public a...

9.8CVSS0.00607EPSS
SaveExploits1References5
attackerkb
attackerkb
•added 2026/02/25 5:32 a.m.•10 views

CVE-2026-3153

A vulnerability has been found in itsourcecode Document Management System 1.0. Impacted is an unknown function of the file /register.php. Such manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public a...

9.8CVSS5.4AI score0.00607EPSS
SaveExploits1References5Affected Software1
CVE
CVE
•added 2026/02/25 5:32 a.m.•46 views

CVE-2026-3153

The CVE-2026-3153 entry concerns itsourcecode Document Management System 1.0. A vulnerability in the /register.php file allows manipulation of the Username parameter to perform a SQL injection, with remote exploitation indicated. Multiple connected sources (Red Hat, EU vulnerability catalogs, CVE...

9.8CVSS5.4AI score0.00607EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2026/02/25 5:32 a.m.•12 views

CVE-2026-3153 itsourcecode Document Management System register.php sql injection

A vulnerability has been found in itsourcecode Document Management System 1.0. Impacted is an unknown function of the file /register.php. Such manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public a...

7.5CVSS5.4AI score0.00607EPSS
SaveExploits1References5
NVD
NVD
•added 2026/02/25 5:17 a.m.•23 views

CVE-2026-3150

A security vulnerability has been detected in itsourcecode College Management System 1.0. This affects an unknown part of the file /admin/display-teacher.php. The manipulation of the argument teacherid leads to sql injection. The attack is possible to be carried out remotely. The exploit has been...

8.8CVSS0.00481EPSS
SaveExploits1References5
OSV
OSV
•added 2026/02/25 5:17 a.m.•16 views

CVE-2026-3150

A security vulnerability has been detected in itsourcecode College Management System 1.0. This affects an unknown part of the file /admin/display-teacher.php. The manipulation of the argument teacherid leads to sql injection. The attack is possible to be carried out remotely. The exploit has been...

8.8CVSS5.7AI score0.00481EPSS
SaveExploits1References5
Rows per page
Query Builder