Lucene search
+L

152745 matches found

NVD
NVD
added 2026/07/04 10:16 p.m.15 views

CVE-2026-14656

A security vulnerability has been detected in code-projects Assessment Management 1.0. This affects an unknown part of the file /admin/remove-user.php. The manipulation of the argument ID leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed...

5.3CVSS0.0047EPSS
SaveExploits0References6
NVD
NVD
added 2026/07/04 10:16 p.m.15 views

CVE-2026-14657

A flaw has been found in code-projects Assessment Management 1.0. This issue affects some unknown processing of the file /lecturer/marking-scheme.php of the component Database Query Handler. This manipulation of the argument squestions causes sql injection. The attack can be initiated remotely. T...

6.5CVSS0.00333EPSS
SaveExploits0References6
NVD
NVD
added 2026/07/04 10:16 p.m.16 views

CVE-2026-14655

A weakness has been identified in code-projects Assessment Management 1.0. Affected by this issue is some unknown functionality of the file admin/view-users.php. Executing a manipulation of the argument User can lead to cross site scripting. The attack may be performed from remote. The exploit ha...

4.8CVSS0.00368EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/07/04 10:15 p.m.50 views

CVE-2026-14659 itsourcecode Hospital Management System patientappointment.php sql injection

A vulnerability has been found in itsourcecode Hospital Management System 1.0. Impacted is an unknown function of the file /patientappointment.php. Such manipulation of the argument patiente leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public...

6.5CVSS0.00333EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2026/07/04 10:15 p.m.12 views

CVE-2026-14659

A vulnerability has been found in itsourcecode Hospital Management System 1.0. Impacted is an unknown function of the file /patientappointment.php. Such manipulation of the argument patiente leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public...

6.5CVSS6.5AI score0.00333EPSS
SaveExploits0References6Affected Software1
CVE
CVE
added 2026/07/04 10:15 p.m.30 views

CVE-2026-14659

Summary : CVE-2026-14659 affects itsourcecode Hospital Management System 1.0. The vulnerability is in the /patientappointment.php script, where manipulation of the patiente argument enables SQL injection. This is a network-facing issue with low-priority details reported as proof-of-concept exploi...

6.5CVSS6.5AI score0.00333EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2026/07/04 10:00 p.m.12 views

CVE-2026-14658

A vulnerability was detected in code-projects Assessment Management 1.0. This vulnerability affects unknown code of the file /lecturer/marking-scheme.php. The manipulation of the argument smarksrange results in sql injection. It is possible to launch the attack remotely. The exploit is now public...

6.5CVSS6.5AI score0.00333EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
added 2026/07/04 10:00 p.m.64 views

CVE-2026-14658 code-projects Assessment Management marking-scheme.php sql injection

A vulnerability was detected in code-projects Assessment Management 1.0. This vulnerability affects unknown code of the file /lecturer/marking-scheme.php. The manipulation of the argument smarksrange results in sql injection. It is possible to launch the attack remotely. The exploit is now public...

6.5CVSS0.00333EPSS
SaveExploits0References6
CVE
CVE
added 2026/07/04 10:00 p.m.37 views

CVE-2026-14658

The CVE-2026-14658 issue affects code-projects Assessment Management 1.0, specifically the file /lecturer/marking-scheme.php. The vulnerability is an SQL injection caused by manipulating the parameter smarksrange[]; it enables remote exploitation. Public exploit information is noted in the descri...

6.5CVSS6.5AI score0.00333EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/07/04 9:45 p.m.57 views

CVE-2026-14657 code-projects Assessment Management Database Query marking-scheme.php sql injection

A flaw has been found in code-projects Assessment Management 1.0. This issue affects some unknown processing of the file /lecturer/marking-scheme.php of the component Database Query Handler. This manipulation of the argument squestions causes sql injection. The attack can be initiated remotely. T...

6.5CVSS0.00333EPSS
SaveExploits0References6
CVE
CVE
added 2026/07/04 9:45 p.m.40 views

CVE-2026-14657

CVE-2026-14657 describes a SQL injection flaw in the code-projects Assessment Management 1.0, affecting the Database Query Handler. The vulnerability arises from how the argument squestions[] is processed in the file /lecturer/marking-scheme.php, enabling remote exploitation. The exploit is publi...

6.5CVSS6.4AI score0.00333EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2026/07/04 9:45 p.m.14 views

CVE-2026-14657

A flaw has been found in code-projects Assessment Management 1.0. This issue affects some unknown processing of the file /lecturer/marking-scheme.php of the component Database Query Handler. This manipulation of the argument squestions causes sql injection. The attack can be initiated remotely. T...

6.5CVSS6.4AI score0.00333EPSS
SaveExploits0References6Affected Software1
CVE
CVE
added 2026/07/04 9:30 p.m.33 views

CVE-2026-14656

CVE-2026-14656 affects code-projects Assessment Management 1.0, with a vulnerability in an unspecified part of /admin/remove-user.php where manipulating the ID parameter enables cross-site scripting. The issue is exploitable remotely and the exploit has been publicly disclosed. CVSS metrics indic...

5.3CVSS4.2AI score0.0047EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2026/07/04 9:30 p.m.18 views

CVE-2026-14656

A security vulnerability has been detected in code-projects Assessment Management 1.0. This affects an unknown part of the file /admin/remove-user.php. The manipulation of the argument ID leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed...

5.3CVSS4.2AI score0.0047EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
added 2026/07/04 9:30 p.m.45 views

CVE-2026-14656 code-projects Assessment Management remove-user.php cross site scripting

A security vulnerability has been detected in code-projects Assessment Management 1.0. This affects an unknown part of the file /admin/remove-user.php. The manipulation of the argument ID leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed...

5.3CVSS0.0047EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/07/04 9:15 p.m.44 views

CVE-2026-14655 code-projects Assessment Management view-users.php cross site scripting

A weakness has been identified in code-projects Assessment Management 1.0. Affected by this issue is some unknown functionality of the file admin/view-users.php. Executing a manipulation of the argument User can lead to cross site scripting. The attack may be performed from remote. The exploit ha...

4.8CVSS0.00368EPSS
SaveExploits0References6
CVE
CVE
added 2026/07/04 9:15 p.m.32 views

CVE-2026-14655

CVE-2026-14655 affects code-projects Assessment Management 1.0. The vulnerability is in an unknown functionality of the file admin/view-users.php , where manipulating the argument User can lead to cross-site scripting (XSS) . The attack is described as possible to be performed from remote, with a...

4.8CVSS4.1AI score0.00368EPSS
SaveExploits0References6
NVD
NVD
added 2026/07/04 7:16 p.m.21 views

CVE-2026-14640

A vulnerability was found in CodeAstro Apartment Visitor Management System 1.0. Affected is an unknown function of the file /index.php of the component Login. Performing a manipulation of the argument Username results in sql injection. Remote exploitation of the attack is possible. The exploit ha...

7.5CVSS0.00431EPSS
SaveExploits0References6
NVD
NVD
added 2026/07/04 6:16 p.m.18 views

CVE-2026-14638

A flaw has been found in itsourcecode Hospital Management System 1.0. This affects an unknown function of the file /patient.php. This manipulation of the argument editid causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used...

6.5CVSS0.00333EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2026/07/04 6:15 p.m.15 views

CVE-2026-14640

A vulnerability was found in CodeAstro Apartment Visitor Management System 1.0. Affected is an unknown function of the file /index.php of the component Login. Performing a manipulation of the argument Username results in sql injection. Remote exploitation of the attack is possible. The exploit ha...

7.5CVSS6.8AI score0.00431EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder