Lucene search
+L

1722 matches found

CVE
CVE
•added 2026/01/04 12:02 p.m.•41 views

CVE-2026-0578

CVE-2026-0578 affects the code-projects Online Product Reservation System 1.0. The vulnerability lies in the file /handgunner-administrator/delete.php , where manipulating the ID parameter leads to a SQL injection . The issue is exploitable remotely and, according to multiple sources, the exploit...

9.8CVSS7AI score0.00543EPSS
SaveExploits1References6Affected Software1
NVD
NVD
•added 2026/01/04 10:15 a.m.•16 views

CVE-2026-0577

A flaw has been found in code-projects Online Product Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file /handgunner-administrator/prod.php. Executing a manipulation can lead to unrestricted upload. It is possible to launch the attack remotely. The...

9.8CVSS0.0036EPSS
SaveExploits1References6
CVE
CVE
•added 2026/01/04 9:32 a.m.•40 views

CVE-2026-0577

CVE-2026-0577 affects code-projects Online Product Reservation System 1.0. The vulnerability is in an unknown functionality of the file /handgunner-administrator/prod.php, where manipulation can lead to an unrestricted file upload. It can be exploited remotely, and an exploit has been published. ...

9.8CVSS6.2AI score0.0036EPSS
SaveExploits1References6Affected Software1
attackerkb
attackerkb
•added 2026/01/04 9:32 a.m.•6 views

CVE-2026-0577

A flaw has been found in code-projects Online Product Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file /handgunner-administrator/prod.php. Executing a manipulation can lead to unrestricted upload. It is possible to launch the attack remotely. The...

9.8CVSS6.1AI score0.0036EPSS
SaveExploits1References6Affected Software1
OSV
OSV
•added 2026/01/04 9:15 a.m.•13 views

CVE-2026-0576

A vulnerability was detected in code-projects Online Product Reservation System 1.0. Affected is an unknown function of the file /handgunner-administrator/prod.php of the component Parameter Handler. Performing a manipulation of the argument cat/price/name/model/serial results in sql injection. I...

9.8CVSS5.7AI score0.00435EPSS
SaveExploits1References6
NVD
NVD
•added 2026/01/04 9:15 a.m.•16 views

CVE-2026-0576

A vulnerability was detected in code-projects Online Product Reservation System 1.0. Affected is an unknown function of the file /handgunner-administrator/prod.php of the component Parameter Handler. Performing a manipulation of the argument cat/price/name/model/serial results in sql injection. I...

9.8CVSS0.00435EPSS
SaveExploits1References6
attackerkb
attackerkb
•added 2026/01/04 9:02 a.m.•8 views

CVE-2026-0576

A vulnerability was detected in code-projects Online Product Reservation System 1.0. Affected is an unknown function of the file /handgunner-administrator/prod.php of the component Parameter Handler. Performing a manipulation of the argument cat/price/name/model/serial results in sql injection. I...

9.8CVSS7.2AI score0.00435EPSS
SaveExploits1References6Affected Software1
EUVD
EUVD
•added 2026/01/04 9:02 a.m.•18 views

EUVD-2026-0781

A vulnerability was detected in code-projects Online Product Reservation System 1.0. Affected is an unknown function of the file /handgunner-administrator/prod.php of the component Parameter Handler. Performing manipulation of the argument cat/price/name/model/serial results in sql injection. It ...

7.5CVSS7.3AI score0.00435EPSS
SaveExploits1References8
Vulnrichment
Vulnrichment
•added 2026/01/04 6:02 a.m.•10 views

CVE-2026-0575 code-projects Online Product Reservation System Administrator Login adminlogin.php sql injection

A security vulnerability has been detected in code-projects Online Product Reservation System 1.0. This impacts an unknown function of the file /handgunner-administrator/adminlogin.php of the component Administrator Login. Such manipulation of the argument emailadd/pass leads to sql injection. Th...

7.5CVSS6.9AI score0.00435EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2026/01/04 6:02 a.m.•45 views

CVE-2026-0575 code-projects Online Product Reservation System Administrator Login adminlogin.php sql injection

A security vulnerability has been detected in code-projects Online Product Reservation System 1.0. This impacts an unknown function of the file /handgunner-administrator/adminlogin.php of the component Administrator Login. Such manipulation of the argument emailadd/pass leads to sql injection. Th...

7.5CVSS0.00435EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2026/01/04 12:00 a.m.•13 views

Code-Projects Online Product Reservation System SQL注入漏洞

Code-Projects Online Product Reservation System is a Code-Projects open source online product reservation system. A SQL injection vulnerability exists in Code-Projects Online Product Reservation System version 1.0, which originates from the incorrect operation of the parameter ID in the file...

9.8CVSS7.7AI score0.00543EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2026/01/04 12:00 a.m.•12 views

Code-Projects Online Product Reservation System SQL注入漏洞

Code-Projects Online Product Reservation System is a Code-Projects open source online product reservation system. Code-Projects Online Product Reservation System version 1.0 has a SQL injection vulnerability, which originates from the incorrect operation of the parameter cat/price/name/model/seri...

9.8CVSS7.8AI score0.00435EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2026/01/04 12:00 a.m.•29 views

PT-2026-1191

Name of the Vulnerable Software and Affected Versions Online Product Reservation System version 1.0 Description A flaw exists in the POST Parameter Handler component of the software, specifically within the /handgunner-administrator/edit.php file. The prod id, name, price, model, and serial...

7.5CVSS7.5AI score0.00435EPSS
SaveExploits1References13
Positive Technologies
Positive Technologies
•added 2026/01/04 12:00 a.m.•29 views

PT-2026-1190

Name of the Vulnerable Software and Affected Versions code-projects Online Product Reservation System version 1.0 Description A flaw exists in an unknown functionality within the /handgunner-administrator/delete.php file. Manipulation of the ID parameter results in a SQL injection condition. This...

7.5CVSS7.3AI score0.00543EPSS
SaveExploits1References12
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/04 12:00 a.m.•1 views

CVE-2026-0579: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Online Product Reservation System 1.0. This affects an unknown part of the file /handgunner-administrator/edit.php of the component POST Parameter Handler. The manipulation of the argument prodid/name/price/model/serial results in sql injection. The atta...

9.8CVSS7AI score0.00435EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/04 12:00 a.m.•1 views

CVE-2026-0576: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in code-projects Online Product Reservation System 1.0. Affected is an unknown function of the file /handgunner-administrator/prod.php of the component Parameter Handler. Performing a manipulation of the argument cat/price/name/model/serial results in sql injection. I...

9.8CVSS7AI score0.00435EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/04 12:00 a.m.•3 views

CVE-2026-0578: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in code-projects Online Product Reservation System 1.0. Affected by this issue is some unknown functionality of the file /handgunner-administrator/delete.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The explo...

9.8CVSS7AI score0.00543EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2026/01/04 12:00 a.m.•16 views

PT-2026-1186

Name of the Vulnerable Software and Affected Versions code-projects Online Product Reservation System version 1.0 Description A flaw exists in code-projects Online Product Reservation System 1.0, specifically within the Parameter Handler component. Manipulation of the cat/price/name/model/serial...

9.8CVSS6.8AI score0.00435EPSS
SaveExploits1References13
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/04 12:00 a.m.•1 views

CVE-2026-0577: Unrestricted Upload of File with Dangerous Type

A flaw has been found in code-projects Online Product Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file /handgunner-administrator/prod.php. Executing a manipulation can lead to unrestricted upload. It is possible to launch the attack remotely. The...

9.8CVSS6.3AI score0.0036EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/04 12:00 a.m.•1 views

CVE-2026-0575: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in code-projects Online Product Reservation System 1.0. This impacts an unknown function of the file /handgunner-administrator/adminlogin.php of the component Administrator Login. Such manipulation of the argument emailadd/pass leads to sql injection. Th...

9.8CVSS6.9AI score0.00435EPSS
SaveExploits1References1
Rows per page
Query Builder