CVE-2026-3412

A vulnerability was detected in itsourcecode University Management System 1.0. This affects an unknown part of the file /attsingleview.php. The manipulation of the argument dt results in cross site scripting. The attack can be executed remotely. The exploit is now public and may be used...

CVE-2026-3413

A flaw has been found in itsourcecode University Management System 1.0. This vulnerability affects unknown code of the file /adminsinglestudent.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been published and may...

CVE-2026-3411

A security vulnerability has been detected in itsourcecode University Management System 1.0. Affected by this issue is some unknown functionality of the file /adminsinglestudentupdate.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. T...

CVE-2026-26709

code-projects Simple Gym Management System v1.0 is vulnerable to SQL Injection in /gym/trainersearch.php...

CVE-2026-26891

Sourcecodester Logistic Hub Parcel's Management System v1.0 is vulnerable to SQL Injection in /manageparceltype.php...

PT-2026-22717

Name of the Vulnerable Software and Affected Versions Gallagher NxWitness VMS integration versions prior to 9.10.017 Gallagher Hanwha VMS integration versions prior to 9.10.025 Description A component used in the Gallagher Hanwha VMS and Gallagher NxWitness VMS integrations allows unprivileged...

PT-2026-22789

Sourcecodester Logistic Hub Parcel's Management System v1.0 is vulnerable to SQL Injection in /manage carrier.php...

CVE-2026-3486: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in itsourcecode College Management System 1.0. This vulnerability affects unknown code of the file /admin/student-fee.php. Such manipulation of the argument rollno leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed t...

itsourcecode College Management System SQL注入漏洞

itsourcecode College Management System is an open-source university management system developed by itsourcecode. Version 1.0 of itsourcecode College Management System has a SQL injection vulnerability. This vulnerability arises from incorrect handling of the parameter rollno in the file...

Gallagher NxWitness VMS 安全漏洞

Gallagher NxWitness VMS is a video management system developed by the New Zealand-based Gallagher company. Versions of Gallagher NxWitness VMS prior to 9.10.017 and 9.10.025 contained security vulnerabilities. These vulnerabilities stemmed from the transmission of sensitive information in plainte...

CVE-2026-26884

Sourcecodester Online Men's Salon Management System v1.0 is vulnerable to SQL Injection in /msms/admin/appointments/viewappointment.php...

PT-2026-22751

Sourcecodester Simple Online Men's Salon Management System v1.0 is vulnerable to SQL Injection in /msms/classes/Master.php?f=delete appointment...

CVE-2026-26891: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester Logistic Hub Parcel's Management System v1.0 is vulnerable to SQL Injection in /manageparceltype.php...

CVE-2026-26892: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester Logistic Hub Parcel's Management System v1.0 is vulnerable to SQL Injection in /managecarrier.php...

CVE-2026-26892

Sourcecodester Logistic Hub Parcel's Management System v1.0 is vulnerable to SQL Injection in /managecarrier.php...

PT-2026-22752

Sourcecodester Simple Online Men's Salon Management System v1.0 is vulnerable to SQL Injection in /msms/admin/appointments/view appointment.php...

PT-2026-22754

Name of the Vulnerable Software and Affected Versions Sourcecodester Simple Online Men's Salon Management System version 1.0 Description The software is susceptible to SQL Injection through the /admin/services/manage service.php endpoint. The manage service.php file is vulnerable. The vulnerabili...

PT-2026-22788

Name of the Vulnerable Software and Affected Versions Sourcecodester Logistic Hub Parcel's Management System version 1.0 Description The software is susceptible to SQL Injection. The issue is present in the /manage parcel type.php file. The manage parcel type.php script does not properly sanitize...

CVE-2026-26886

Sourcecodester Online Men's Salon Management System v1.0 is vulnerable to SQL Injection within the /admin/services/manage_service.php file. This vulnerability stems from the improper neutralization of special elements used in an SQL command. The documents do not provide specific details regarding...

CVE-2026-26886: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester Online Men's Salon Management System v1.0 is vulnerable to SQL Injection in /admin/services/manageservice.php...