Lucene search
K

3773 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 9:26 a.m.5 views

CVE-2023-4176

A vulnerability was found in SourceCodester Hospital Management System 1.0. It has been classified as critical. This affects an unknown part of the file appointmentapproval.php. The manipulation of the argument time leads to sql injection. It is possible to initiate the attack remotely. The explo...

9.8CVSS8AI score0.00732EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/01/09 9:25 a.m.3 views

CVE-2023-4438

A vulnerability has been found in SourceCodester Inventory Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file app/ajax/searchsalesreport.php. The manipulation of the argument customer leads to sql injection. The attack can be...

9.8CVSS8AI score0.00596EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 9:25 a.m.6 views

CVE-2023-4447

A vulnerability has been found in OpenRapid RapidCMS 1.3.1 and classified as critical. This vulnerability affects unknown code of the file admin/article-chat.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to th...

9.8CVSS8.1AI score0.00526EPSS
Exploits0References1
OSV
OSV
added 2026/01/09 12:15 a.m.3 views

CVE-2026-0733

A vulnerability was determined in PHPGurukul Online Course Registration System up to 3.1. This impacts an unknown function of the file /onlinecourse/admin/manage-students.php. This manipulation of the argument id/cid causes sql injection. It is possible to initiate the attack remotely. The exploi...

8.8CVSS5.7AI score0.00357EPSS
Exploits1References7
NVD
NVD
added 2026/01/09 12:15 a.m.8 views

CVE-2026-0733

A vulnerability was determined in PHPGurukul Online Course Registration System up to 3.1. This impacts an unknown function of the file /onlinecourse/admin/manage-students.php. This manipulation of the argument id/cid causes sql injection. It is possible to initiate the attack remotely. The exploi...

8.8CVSS0.00357EPSS
Exploits1References7
Vulnrichment
Vulnrichment
added 2026/01/08 8:2 a.m.3 views

CVE-2026-0701 code-projects Intern Membership Management System add_admin.php sql injection

A vulnerability was identified in code-projects Intern Membership Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /intern/admin/addadmin.php. The manipulation of the argument Username leads to sql injection. The attack is possible to be carried out...

5.8CVSS6.8AI score0.00314EPSS
Exploits1References5
NVD
NVD
added 2026/01/08 7:15 a.m.6 views

CVE-2026-0699

A vulnerability was found in code-projects Intern Membership Management System 1.0. This impacts an unknown function of the file /intern/admin/editactivity.php. Performing a manipulation of the argument activityid results in sql injection. Remote exploitation of the attack is possible. The exploi...

7.2CVSS0.00313EPSS
Exploits1References5
CVE
CVE
added 2026/01/08 7:2 a.m.11 views

CVE-2026-0700

CVE-2026-0700 affects Code-Projects Intern Membership Management System 1.0, with the vulnerability in /intern/admin/check_admin.php (unknown function) allowing manipulation of the Username parameter to trigger SQL injection. It is remotely exploitable and the exploit has been publicly disclosed....

9.8CVSS7.2AI score0.00379EPSS
Exploits1References5Affected Software1
NVD
NVD
added 2026/01/08 5:16 a.m.4 views

CVE-2026-0697

A flaw has been found in code-projects Intern Membership Management System 1.0. The impacted element is an unknown function of the file /intern/admin/editadmin.php. This manipulation of the argument adminid causes sql injection. The attack may be initiated remotely. The exploit has been published...

7.2CVSS0.00313EPSS
Exploits1References5
Cvelist
Cvelist
added 2026/01/08 4:32 a.m.29 views

CVE-2026-0697 code-projects Intern Membership Management System edit_admin.php sql injection

A flaw has been found in code-projects Intern Membership Management System 1.0. The impacted element is an unknown function of the file /intern/admin/editadmin.php. This manipulation of the argument adminid causes sql injection. The attack may be initiated remotely. The exploit has been published...

5.8CVSS0.00313EPSS
Exploits1References5
RedhatCVE
RedhatCVE
added 2026/01/07 9:31 a.m.5 views

CVE-2019-16065

A remote SQL injection web vulnerability was discovered in the Enigma NMS 65.0.0 and prior web application that allows an attacker to execute SQL commands to expose and compromise the web server, expose database tables and values, and potentially execute system-based commands as the mysql user...

9CVSS8.2AI score0.0281EPSS
Exploits5References1
CVE
CVE
added 2026/01/05 11:2 p.m.13 views

CVE-2026-0606

CVE-2026-0606 affects code-projects Online Music Site 1.0. The vulnerability exists in the /FrontEnd/Albums.php file where manipulating the ID argument triggers an SQL injection. The issue can be exploited remotely and public PoC/exploit are noted in multiple feeds, indicating active public expos...

9.8CVSS7.3AI score0.00392EPSS
Exploits1References6Affected Software1
EUVD
EUVD
added 2026/01/05 1:32 p.m.7 views

EUVD-2026-0854

A security flaw has been discovered in code-projects Online Product Reservation System 1.0. This affects an unknown function of the file /handgunner-administrator/registercode.php of the component User Registration Handler. Performing a manipulation of the argument...

7.5CVSS7.2AI score0.00379EPSS
Exploits1References8
NVD
NVD
added 2026/01/05 1:15 p.m.6 views

CVE-2026-0590

A vulnerability was determined in code-projects Online Product Reservation System 1.0. The affected element is an unknown function of the file /app/checkout/delete.php of the component POST Parameter Handler. This manipulation of the argument ID causes sql injection. It is possible to initiate th...

9.8CVSS0.00315EPSS
Exploits1References6
RedhatCVE
RedhatCVE
added 2026/01/05 12:14 p.m.13 views

CVE-2025-15443

A vulnerability was identified in CRMEB up to 5.6.1. This issue affects some unknown processing of the file /adminapi/product/productexport. Such manipulation of the argument cateid leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used. T...

5.8CVSS5.2AI score0.00329EPSS
Exploits1References1
OSV
OSV
added 2026/01/05 10:15 a.m.2 views

CVE-2026-0583

A security flaw has been discovered in code-projects Online Product Reservation System 1.0. This vulnerability affects unknown code of the file app/user/login.php of the component User Login. The manipulation of the argument emailadd results in sql injection. The attack may be launched remotely...

9.8CVSS5.7AI score0.00371EPSS
Exploits1References6
Cvelist
Cvelist
added 2026/01/04 11:32 p.m.32 views

CVE-2025-15447

...

0.00035EPSS
Exploits0
NVD
NVD
added 2026/01/04 12:15 p.m.4 views

CVE-2026-0578

A vulnerability has been found in code-projects Online Product Reservation System 1.0. Affected by this issue is some unknown functionality of the file /handgunner-administrator/delete.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The explo...

9.8CVSS0.00466EPSS
Exploits1References6
RedhatCVE
RedhatCVE
added 2026/01/03 12:33 a.m.5 views

CVE-2025-15420

A security vulnerability has been detected in Yonyou KSOA 9.0. This affects an unknown part of the file /worksheet/agentworkreport.jsp. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. The...

9.8CVSS6.9AI score0.00384EPSS
Exploits1References1
OSV
OSV
added 2026/01/02 7:15 p.m.3 views

CVE-2026-0570

A vulnerability was found in code-projects Online Music Site 1.0. This impacts an unknown function of the file /Frontend/Feedback.php. Performing a manipulation of the argument fname results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be used...

9.8CVSS5.8AI score0.00385EPSS
Exploits1References5
Rows per page
Query Builder