Lucene search
+L

10 matches found

redhatcve
redhatcve
added 2026/04/06 10:57 a.m.8 views

CVE-2026-5552

A weakness has been identified in PHPGurukul Online Shopping Portal Project 2.1. This issue affects some unknown processing of the file /sub-category.php of the component Parameter Handler. This manipulation of the argument pid causes sql injection. Remote exploitation of the attack is possible...

6.5CVSS6.4AI score0.00246EPSS
Exploits0References1
nvd
nvd
added 2025/11/10 3:15 a.m.7 views

CVE-2025-12926

A weakness has been identified in SourceCodester Farm Management System 1.0. The affected element is an unknown function of the file /review.php. This manipulation of the argument pid causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to the...

8.8CVSS0.00301EPSS
Exploits1References5
cvelist
cvelist
added 2025/10/28 12:2 a.m.13 views

CVE-2025-12337 Campcodes Retro Basketball Shoes Online Store admin_feature.php sql injection

A security flaw has been discovered in Campcodes Retro Basketball Shoes Online Store 1.0. This affects an unknown part of the file /admin/adminfeature.php. Performing a manipulation of the argument pid results in sql injection. The attack may be initiated remotely. The exploit has been released t...

7.5CVSS0.00437EPSS
Exploits1References5
cve
cve
added 2025/10/08 2:2 p.m.18 views

CVE-2025-11478

CVE-2025-11478 affects SourceCodester Farm Management System 1.0. The vulnerability stems from manipulation of the pid parameter in /myCart.php, enabling SQL injection and remote exploitation. Public exploits exist. Multiple connected sources corroborate the flaw, but there is no information in t...

8.8CVSS6.3AI score0.00308EPSS
Exploits1References5Affected Software1
ptsecurity
ptsecurity
added 2025/09/03 12:0 a.m.11 views

PT-2025-35850

Name of the Vulnerable Software and Affected Versions: TOTOLINK X5000R version 9.1.0cu.2415 B20250515 Description: A command injection issue exists in the sub 410C34 function of the /cgi-bin/cstecgi.cgi file. Manipulation of the pid argument can lead to remote code execution. The exploit has been...

6.5CVSS7.1AI score0.03738EPSS
Exploits1References10
ptsecurity
ptsecurity
added 2024/12/26 12:0 a.m.9 views

PT-2024-17819 · Code Projects · Code-Projects Travel Management System

Name of the Vulnerable Software and Affected Versions: code-projects Travel Management System version 1.0 Description: A critical issue has been found in the system, affecting an unknown part of the file /detail.php. The manipulation of the pid argument leads to SQL injection. It is possible to...

8.8CVSS8.2AI score0.00567EPSS
Exploits0References10
osv
osv
added 2023/12/03 12:15 a.m.6 views

CVE-2023-6474

A vulnerability has been found in PHPGurukul Nipah Virus Testing Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file manage-phlebotomist.php. The manipulation of the argument pid leads to cross-site request forgery. The attack can be initiated...

6.5CVSS4.8AI score0.00399EPSS
Exploits1References3
prion
prion
added 2023/12/03 12:15 a.m.17 views

Cross site request forgery (csrf)

A vulnerability has been found in PHPGurukul Nipah Virus Testing Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file manage-phlebotomist.php. The manipulation of the argument pid leads to cross-site request forgery. The attack can be initiated...

5CVSS7.2AI score0.00399EPSS
Exploits1References3Affected Software1
cve
cve
added 2018/06/17 8:0 p.m.82 views

CVE-2018-12028

CVE-2018-12028 : An Incorrect Access Control vulnerability exists in SpawningKit, part of Phusion Passenger 5.3.x, reported before 5.3.2. A Passenger-managed malicious application, when spawning a child process, can report an arbitrary different PID to Passenger’s process manager. If that applica...

7.8CVSS7.5AI score0.009EPSS
Exploits0References2Affected Software1
nvd
nvd
added 1998/11/18 5:0 a.m.17 views

CVE-1999-0780

KDE klock allows local users to kill arbitrary processes by specifying an arbitrary PID in the .kss.pid file...

4.6CVSS0.00323EPSS
Exploits0References1
Rows per page
Query Builder