Lucene search
+L

2887 matches found

GithubExploit
GithubExploit
added 2026/02/11 4:45 p.m.191 views

Exploit for SQL Injection in Cmsmadesimple Cms_Made_Simple

CVE-2019-9053 - CMS Made Simple SQL Injection Exploit Modifie...

8.1CVSS6AI score0.68581EPSS
SaveExploits38
NVD
NVD
added 2026/02/10 6:16 p.m.12 views

CVE-2026-25947

Worklenz is a project management tool. Prior to 2.1.7, there are multiple SQL injection vulnerabilities were discovered in backend SQL query construction affecting project and task management controllers, reporting and financial data endpoints, real-time socket.io handlers, and resource allocatio...

8.8CVSS0.00354EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
added 2026/02/10 1:23 p.m.9 views

CVE-2025-6830

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Xpoda Türkiye Information Technology Inc. Password Module allows SQL Injection.This issue affects Password Module: through 11022026...

9.8CVSS5.7AI score0.00415EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/02/10 1:23 a.m.8 views

CVE-2026-2196

A vulnerability was found in code-projects Online Reviewer System 1.0. This issue affects some unknown processing of the file /system/system/admins/assessments/pretest/exam-update.php. The manipulation of the argument testid results in sql injection. The attack may be performed from remote. The...

9.8CVSS5.4AI score0.00381EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2026/02/10 12:0 a.m.18 views

PT-2026-7418

Name of the Vulnerable Software and Affected Versions EverShop versions prior to 2.1.1 Description EverShop is a TypeScript-first eCommerce platform susceptible to a second-order SQL injection. During category update and deletion event handling, the application incorporates values from the url...

9.8CVSS5.8AI score0.0032EPSS
SaveExploits0References12
CVE
CVE
added 2026/02/09 9:2 a.m.26 views

CVE-2026-2225

CVE-2026-2225 affects itsourcecode News Portal Project 1.0. The vulnerability resides in the Administrator Login component, specifically the file /admin/index.php, where manipulating the email argument enables a SQL injection. The issue can be exploited remotely, and the exploit has been publishe...

9.8CVSS5.4AI score0.00416EPSS
SaveExploits1References6Affected Software1
CVE
CVE
added 2026/02/09 2:32 a.m.19 views

CVE-2026-2211

CVE-2026-2211 (code-projects Online Music Site 1.0) : The vulnerability is in the unknown function of the file /Administrator/PHP/AdminDeleteCategory.php. A manipulation of the argument ID can trigger a SQL injection , with the attack executable remotely. Public disclosure of the exploit is noted...

9.8CVSS7.2AI score0.00323EPSS
SaveExploits1References5Affected Software1
RedhatCVE
RedhatCVE
added 2026/02/09 1:33 a.m.11 views

CVE-2026-2117

A vulnerability was found in itsourcecode Society Management System 1.0. The affected element is an unknown function of the file /admin/editactivity.php. Performing a manipulation of the argument activityid results in sql injection. The attack can be initiated remotely. The exploit has been made...

9.8CVSS7.1AI score0.00323EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2026/02/09 12:32 a.m.5 views

CVE-2026-2199

A security flaw has been discovered in code-projects Online Reviewer System 1.0. The impacted element is an unknown function of the file /reviewer/system/system/admins/manage/users/user-delete.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated...

7.5CVSS5.5AI score0.00323EPSS
SaveExploits1References5Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/02/09 12:2 a.m.6 views

CVE-2026-2196

A vulnerability was found in code-projects Online Reviewer System 1.0. This issue affects some unknown processing of the file /system/system/admins/assessments/pretest/exam-update.php. The manipulation of the argument testid results in sql injection. The attack may be performed from remote. The...

7.5CVSS5.4AI score0.00381EPSS
SaveExploits1References5Affected Software1
Positive Technologies
Positive Technologies
added 2026/02/09 12:0 a.m.15 views

PT-2026-7088

A flaw has been found in itsourcecode News Portal Project 1.0. This vulnerability affects unknown code of the file /admin/index.php of the component Administrator Login. This manipulation of the argument email causes sql injection. The attack can be initiated remotely. The exploit has been...

7.5CVSS5.4AI score0.00416EPSS
SaveExploits1References6
ATTACKERKB
ATTACKERKB
added 2026/02/08 7:32 p.m.7 views

CVE-2026-2179

A vulnerability was determined in PHPGurukul Hospital Management System 4.0. This impacts an unknown function of the file /admin/manage-users.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be...

5.8CVSS5.2AI score0.00308EPSS
SaveExploits1References5Affected Software1
EUVD
EUVD
added 2026/02/08 7:2 p.m.8 views

EUVD-2026-5774

A security vulnerability has been detected in code-projects Contact Management System 1.0. This issue affects some unknown processing of the file index.py. Such manipulation of the argument selecteditem0 leads to sql injection. The attack can be executed remotely...

8.8CVSS5.4AI score0.00243EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/02/08 5:2 p.m.13 views

EUVD-2026-5783

A security vulnerability has been detected in code-projects Online Reviewer System 1.0. The affected element is an unknown function of the file /login/index.php of the component Login. The manipulation of the argument username/password leads to sql injection. The attack is possible to be carried...

9.8CVSS5.3AI score0.00416EPSS
SaveExploits1References6
OSV
OSV
added 2026/02/08 4:15 p.m.6 views

CVE-2026-2162

A vulnerability was determined in itsourcecode News Portal Project 1.0. This affects an unknown part of the file /admin/aboutus.php. This manipulation of the argument pagetitle causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized...

7.2CVSS5.7AI score0.00318EPSS
SaveExploits1References5
NVD
NVD
added 2026/02/08 4:15 p.m.12 views

CVE-2026-2162

A vulnerability was determined in itsourcecode News Portal Project 1.0. This affects an unknown part of the file /admin/aboutus.php. This manipulation of the argument pagetitle causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized...

7.2CVSS0.00318EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2026/02/08 4:2 p.m.4 views

CVE-2026-2162 itsourcecode News Portal Project aboutus.php sql injection

A vulnerability was determined in itsourcecode News Portal Project 1.0. This affects an unknown part of the file /admin/aboutus.php. This manipulation of the argument pagetitle causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized...

5.8CVSS5.5AI score0.00318EPSS
SaveExploits1References5
OSV
OSV
added 2026/02/08 4:15 a.m.5 views

CVE-2026-2132

A security flaw has been discovered in code-projects Online Music Site 1.0. This issue affects some unknown processing of the file /Administrator/PHP/AdminUpdateCategory.php. The manipulation of the argument txtcat results in sql injection. The attack can be executed remotely. The exploit has bee...

9.8CVSS5.8AI score0.00323EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2026/02/08 12:0 a.m.19 views

PT-2026-7022

Name of the Vulnerable Software and Affected Versions itsourcecode School Management System version 1.0 Description A flaw exists in itsourcecode School Management System that allows for remote code execution. The issue is related to the manipulation of the ay argument in the file...

9.8CVSS6AI score0.00381EPSS
SaveExploits1References9
CNNVD
CNNVD
added 2026/02/08 12:0 a.m.10 views

News Portal Project SQL注入漏洞

News Portal Project is an open-source news portal project developed by Anuj Kumar as a personal project. Version 1.0 of News Portal Project has a SQL injection vulnerability, which arises from incorrect handling of the parameter pagetitle in the file admin/aboutus.php, potentially leading to SQL...

7.2CVSS5.8AI score0.00318EPSS
SaveExploits1References6
Rows per page
Query Builder