23303 matches found
EUVD-2026-10248
A vulnerability was found in code-projects Student Web Portal 1.0. Affected is an unknown function of the file profile.php. The manipulation of the argument User results in sql injection. The attack can be launched remotely. The exploit has been made public and could be used...
CVE-2026-3745
A vulnerability was found in code-projects Student Web Portal 1.0. Affected is an unknown function of the file profile.php. The manipulation of the argument User results in sql injection. The attack can be launched remotely. The exploit has been made public and could be used...
CVE-2026-3745
A vulnerability was found in code-projects Student Web Portal 1.0. Affected is an unknown function of the file profile.php. The manipulation of the argument User results in sql injection. The attack can be launched remotely. The exploit has been made public and could be used...
CVE-2026-3745
CVE-2026-3745 affects code-projects’ Student Web Portal 1.0. An unknown function in profile.php allows manipulation of the User argument, resulting in an SQL injection. The vulnerability is remotely exploitable and, per the sources, the exploit has been publicly disclosed. Affected impact is desc...
CVE-2026-3745 code-projects Student Web Portal profile.php sql injection
A vulnerability was found in code-projects Student Web Portal 1.0. Affected is an unknown function of the file profile.php. The manipulation of the argument User results in sql injection. The attack can be launched remotely. The exploit has been made public and could be used...
CVE-2026-1644
The WP Frontend Profile plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.8. This is due to missing nonce validation on the 'updateaction' function. This makes it possible for unauthenticated attackers to approve or reject user account...
PT-2026-23951
A vulnerability was found in code-projects Student Web Portal 1.0. Affected is an unknown function of the file profile.php. The manipulation of the argument User results in sql injection. The attack can be launched remotely. The exploit has been made public and could be used...
PT-2026-23977
A security flaw has been discovered in SourceCodester Web-based Pharmacy Product Management System 1.0. This impacts an unknown function of the file edit-profile.php. Performing a manipulation of the argument fullname results in cross site scripting. The attack may be initiated remotely. The...
Code-Projects Student Web Portal SQL注入漏洞
Code-Projects Student Web Portal is an open-source student portal developed by Code-Projects. Version 1.0 of the Code-Projects Student Web Portal contains a SQL injection vulnerability, which stems from the handling of the User parameter in the profile.php file, potentially leading to SQL injecti...
SourceCodester Web-based Pharmacy Product Management System 代码注入漏洞
SourceCodester Web-based Pharmacy Product Management System is an open-source web-based pharmacy product management system developed by SourceCodester. Version 1.0 of the SourceCodester Web-based Pharmacy Product Management System contains a code injection vulnerability. This vulnerability stems...
PT-2026-41162
Name of the Vulnerable Software and Affected Versions Open WebUI versions prior to 0.8.0 Description The profile image url field on the user profile update form accepts arbitrary data: URI values without MIME-type validation, leading to Cross-Site Scripting XSS. This occurs because the applicatio...
CVE-2026-3670
creationtimestamp| type| source ---|---|--- 2026-03-07 18:15:49+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-3670 2026-03-07 21:29:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgirifcq7n2k...
CVE-2026-30863
creationtimestamp| type| source ---|---|--- 2026-03-07 16:15:54+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-30863 2026-03-07 19:26:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgiknccezp2y 2026-03-08 04:00:29+00:00| seen|...
CVE-2026-29192
creationtimestamp| type| source ---|---|--- 2026-03-07 15:37:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgi5u3mda52c...
CVE-2026-29186
creationtimestamp| type| source ---|---|--- 2026-03-07 15:17:08+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgi4ovd36o2v...
CVE-2026-28476
creationtimestamp| type| source ---|---|--- 2026-03-07 12:07:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mghs2yjb5l2d...
CVE-2026-26018
creationtimestamp| type| source ---|---|--- 2026-03-07 11:00:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mghoegdkt62f 2026-03-07 11:17:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mghpcawlie2n 2026-03-16 00:00:00+00:00| seen|...
CVE-2026-1071
creationtimestamp| type| source ---|---|--- 2026-03-07 09:53:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mghkmpxojd27...