CVE-2026-86163

itsourcecode Sales and Inventory System 1.0 contains a SQL injection vulnerability in the file /pages/pro_del.php , triggered by manipulation of the ID argument. The attack is exploitable remotely and requires low privileges with no user interaction. The base CVSS 3.1 score is 6.3 (MEDIUM) with l...

EUVD-2026-72047

A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This impacts an unknown function of the file /pages/prodel.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit is publicly available and might...

EUVD-2026-72046

A vulnerability was determined in SourceCodester Online Voting System 1.0. This affects an unknown function of the file /ajax.php?action=login. Executing a manipulation of the argument Username can lead to sql injection. The attack can be executed remotely. The exploit has been publicly disclosed...

CVE-2026-86161

SourceCodester Online Voting System 1.0 is vulnerable to SQL injection in the file /ajax.php?action=delete_category via manipulation of the ID argument. The vulnerability is remotely exploitable without authentication or user interaction. The exploit has been made public at a proof-of-concept mat...

EUVD-2026-72045

A vulnerability was found in SourceCodester Online Voting System 1.0. The impacted element is an unknown function of the file /ajax.php?action=deletecategory. Performing a manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit has been...

PT-2026-86478

A vulnerability was identified in Tenda HG10 300001138. Impacted is the function formgponConf of the file /boaform/admin/formgponConf of the component Boa. The manipulation of the argument fmgpon loid leads to os command injection. Remote exploitation of the attack is possible. The exploit is...

PT-2026-86477

A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/trans view.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit has been released to the public...

PT-2026-86527

A vulnerability was found in Mstfakts College-Management-System. This issue affects the function mysqli query of the file Front-end/university.php of the component Search Handler. The manipulation of the argument book name/book author results in sql injection. The attack may be performed from...

PT-2026-86474

A vulnerability was found in SourceCodester Online Voting System 1.0. The impacted element is an unknown function of the file /ajax.php?action=delete category. Performing a manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit has bee...

PT-2026-86503

A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. This impacts an unknown function of the file /delete teacher.php. The manipulation of the argument ID results in sql injection. The attack can be launched remotely. The exploit has been released to the...

PT-2026-86492

A vulnerability was found in code-projects Task Management System 1.0. Affected by this issue is some unknown functionality of the file /user/UpdateUserProfile.php of the component User Profile Update. The manipulation of the argument lname results in cross site scripting. The attack can be...

PT-2026-86502

A vulnerability was identified in diem-project diem up to 5.1.3. This vulnerability affects unknown code of the file dmFrontPlugin/modules/dmWidget/lib/BasedmWidgetActions.class.php of the component dmWidget. Such manipulation of the argument widget id leads to authorization bypass. The attack ma...

PT-2026-86532

A security vulnerability has been detected in code-projects Hotel and Tourism Reservation in PHP 1.0. This impacts an unknown function of the file /ht/details.php. The manipulation of the argument room leads to cross site scripting. The attack may be initiated remotely. The exploit has been...

PT-2026-86558

A vulnerability was detected in SourceCodester Class and Exam Timetabling System 1.0. The affected element is the function mysqli query of the file /admin/modal add course.php. The manipulation of the argument course results in sql injection. The attack can be launched remotely. The exploit is no...

PT-2026-86580

A vulnerability was detected in itsourcecode Sales and Inventory System 1.0. This affects an unknown part of the file /pages/cust transac.php?action=add. The manipulation of the argument firstname results in sql injection. It is possible to launch the attack remotely. The exploit is now public an...

PT-2026-86493

A vulnerability was determined in diem-project diem up to 5.1.3. This affects the function executeCommand of the file dmAdminPlugin/modules/dmConsole/actions/actions.class.php of the component dmConsole. This manipulation of the argument dm command causes cross-site request forgery. The attack ma...

PT-2026-86578

Name of the Vulnerable Software and Affected Versions itsourcecode Sales and Inventory System version 1.0 Description A remote SQL injection is possible due to improper handling of the ID variable in the '/pages/sup del.php?type=supplier' endpoint. SQL injection is a technique where an attacker...

PT-2026-86488

A vulnerability was detected in DefaultFuction CRM 1.0.0. This impacts an unknown function of the file /modules/customers/delete.php. Performing a manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and may be used...

PT-2026-86534

A vulnerability was detected in code-projects Hotel and Tourism Reservation in PHP 1.0. Affected is an unknown function of the file /ht/hotel db%201.sql of the component Database Backup Handler. The manipulation results in information disclosure. The attack may be launched remotely. The exploit i...

SUSE CVE-2026-11465

A security flaw has been discovered in songquanpeng one-api up to 0.6.11-preview.7. Affected by this issue is the function Redeem of the file model/redemption.go of the component Redemption Code Top-Up Endpoint. The manipulation results in business logic errors. The attack may be launched remotel...