CVE-2022-41445

CVE-2022-41445 CodeIgniter를 사용하는 교사 기록 관리 시스템의 사이트 간 스크립팅 XSS 제안된 설명 CodeIgniter 1.0을 사용하는 기록 관리 시스템에서의 사이트 간 스크립팅 XSS 취약점으로, 공격자가 Add Subject 페이지에 제작된 페이로드를 주입하여 임의의 웹 스크립트나 HTML을 실행할 수 있습니다. 추가 정보 개념 증명PoC: https://phpgurukul.com/teachers-record-management-system-using-codeigniter/ 취약점 유형 사이트 간...

CVE-2022-41446

CVE-2022-41446 CodeIgnitor를 사용한 교사 기록 관리 시스템의 권한 상승 제안된 설명 /Admin/dashboard.php의 접근 제어 문제로 CodeIgniter v1.0을 사용한 기록 관리 시스템에서 공격자가 사용자 데이터에 접근 및 수정할 수 있습니다. 추가 정보 개념 증명: https://drive.google.com/file/d/1Rre498CWp9pWyW9h5ran8GkW6TA2NztC/view?usp=sharing 취약점 유형 잘못된 접근 제어 기타 취약점 유형 Privile 제품 공급업체...

CVE-2026-91854

A vulnerability was identified in code-projects Record Management System 1.0. Affected is an unknown function of the file main/reg.php. Such manipulation of the argument desc leads to cross site scripting. The attack may be launched remotely. The exploit is publicly available and might be used...

CVE-2026-91854 code-projects Record Management System reg.php cross site scripting

A vulnerability was identified in code-projects Record Management System 1.0. Affected is an unknown function of the file main/reg.php. Such manipulation of the argument desc leads to cross site scripting. The attack may be launched remotely. The exploit is publicly available and might be used...

CVE-2026-91854

A stored Cross-Site Scripting (XSS) vulnerability in code-projects Record Management System 1.0 , located in an unknown function of main/reg.php . Manipulating the desc parameter leads to script injection. The attack is remotely exploitable and requires user interaction (CVSS 3.1 base score: 4.3 ...

EUVD-2026-78826

A vulnerability was identified in code-projects Record Management System 1.0. Affected is an unknown function of the file main/reg.php. Such manipulation of the argument desc leads to cross site scripting. The attack may be launched remotely. The exploit is publicly available and might be used...

CVE-2026-91854 code-projects Record Management System reg.php cross site scripting

A vulnerability was identified in code-projects Record Management System 1.0. Affected is an unknown function of the file main/reg.php. Such manipulation of the argument desc leads to cross site scripting. The attack may be launched remotely. The exploit is publicly available and might be used...

CVE-2026-91854: Improper Neutralization of Input During Web Page Generation

A vulnerability was identified in code-projects Record Management System 1.0. Affected is an unknown function of the file main/reg.php. Such manipulation of the argument desc leads to cross site scripting. The attack may be launched remotely. The exploit is publicly available and might be used...

PT-2026-92133

Name of the Vulnerable Software and Affected Versions code-projects Record Management System version 1.0 Description A remote cross-site scripting issue exists in the file main/reg.php. The flaw allows an attacker to execute malicious scripts by manipulating the desc argument. Recommendations As ...

CVE-2026-6006: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in code-projects Patient Record Management System 1.0. The impacted element is an unknown function of the file /edithpatient.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the...

CVE-2026-6005: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in code-projects Patient Record Management System 1.0. The affected element is an unknown function of the file /hematologyprint.php. Executing a manipulation of the argument hemid can lead to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2026-5960: Exposure of Sensitive Information to an Unauthorized Actor

A weakness has been identified in code-projects Patient Record Management System 1.0. This affects an unknown part of the file /db/hcpms.sql of the component SQL Database Backup File Handler. Executing a manipulation can lead to information disclosure. The attack can be launched remotely. The...

CVE-2026-5575

A vulnerability was detected in SourceCodester/jkev Record Management System 1.0. Affected by this vulnerability is an unknown functionality of the file index.php of the component Login. The manipulation of the argument Username results in sql injection. The attack may be launched remotely. The...

CVE-2026-5576

A flaw has been found in SourceCodester/jkev Record Management System 1.0. Affected by this issue is some unknown functionality of the file saveemp.php of the component Add Employee Page. This manipulation causes unrestricted upload. Remote exploitation of the attack is possible. The exploit has...

CVE-2026-5576 SourceCodester/jkev Record Management System Add Employee save_emp.php unrestricted upload

A flaw has been found in SourceCodester/jkev Record Management System 1.0. Affected by this issue is some unknown functionality of the file saveemp.php of the component Add Employee Page. This manipulation causes unrestricted upload. Remote exploitation of the attack is possible. The exploit has...

CVE-2026-5576

SourceCodester/jkev Record Management System 1.0 contains a flaw in Add Employee page, specifically in save_emp.php that allows unrestricted file upload. The issue enables remote exploitation; exploit code is reported as available. The CVSS-derived data indicate network access, low to moderate im...

CVE-2026-5575 SourceCodester/jkev Record Management System Login index.php sql injection

A vulnerability was detected in SourceCodester/jkev Record Management System 1.0. Affected by this vulnerability is an unknown functionality of the file index.php of the component Login. The manipulation of the argument Username results in sql injection. The attack may be launched remotely. The...

EUVD-2026-19099

A vulnerability was detected in SourceCodester/jkev Record Management System 1.0. Affected by this vulnerability is an unknown functionality of the file index.php of the component Login. The manipulation of the argument Username results in sql injection. The attack may be launched remotely. The...

CVE-2026-5575

SourceCodester/jkev Record Management System 1.0 is affected in the Login component, specifically the file index.php. The vulnerability arises from manipulation of the Username argument, leading to SQL injection. The attack could be launched remotely, and public exploits are available. The connec...

PT-2026-30444

A vulnerability was detected in SourceCodester/jkev Record Management System 1.0. Affected by this vulnerability is an unknown functionality of the file index.php of the component Login. The manipulation of the argument Username results in sql injection. The attack may be launched remotely. The...