Lucene search
+L

1434 matches found

OSV
OSV
added 2026/01/04 12:15 p.m.9 views

CVE-2026-0578

A vulnerability has been found in code-projects Online Product Reservation System 1.0. Affected by this issue is some unknown functionality of the file /handgunner-administrator/delete.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The explo...

9.8CVSS5.7AI score0.00466EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
added 2026/01/04 12:2 p.m.3 views

CVE-2026-0578 code-projects Online Product Reservation System delete.php sql injection

A vulnerability has been found in code-projects Online Product Reservation System 1.0. Affected by this issue is some unknown functionality of the file /handgunner-administrator/delete.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The explo...

7.5CVSS6.9AI score0.00466EPSS
SaveExploits1References6
CVE
CVE
added 2026/01/04 12:2 p.m.18 views

CVE-2026-0578

CVE-2026-0578 affects the code-projects Online Product Reservation System 1.0. The vulnerability lies in the file /handgunner-administrator/delete.php , where manipulating the ID parameter leads to a SQL injection . The issue is exploitable remotely and, according to multiple sources, the exploit...

9.8CVSS7.3AI score0.00466EPSS
SaveExploits1References6Affected Software1
NVD
NVD
added 2026/01/04 10:15 a.m.6 views

CVE-2026-0577

A flaw has been found in code-projects Online Product Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file /handgunner-administrator/prod.php. Executing a manipulation can lead to unrestricted upload. It is possible to launch the attack remotely. The...

9.8CVSS0.00309EPSS
SaveExploits1References6
ATTACKERKB
ATTACKERKB
added 2026/01/04 9:32 a.m.4 views

CVE-2026-0577

A flaw has been found in code-projects Online Product Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file /handgunner-administrator/prod.php. Executing a manipulation can lead to unrestricted upload. It is possible to launch the attack remotely. The...

9.8CVSS6.1AI score0.00309EPSS
SaveExploits1References6Affected Software1
CVE
CVE
added 2026/01/04 9:32 a.m.17 views

CVE-2026-0577

CVE-2026-0577 affects code-projects Online Product Reservation System 1.0. The vulnerability is in an unknown functionality of the file /handgunner-administrator/prod.php, where manipulation can lead to an unrestricted file upload. It can be exploited remotely, and an exploit has been published. ...

9.8CVSS6.2AI score0.00309EPSS
SaveExploits1References6Affected Software1
OSV
OSV
added 2026/01/04 9:15 a.m.7 views

CVE-2026-0576

A vulnerability was detected in code-projects Online Product Reservation System 1.0. Affected is an unknown function of the file /handgunner-administrator/prod.php of the component Parameter Handler. Performing a manipulation of the argument cat/price/name/model/serial results in sql injection. I...

9.8CVSS5.7AI score0.00374EPSS
SaveExploits1References6
NVD
NVD
added 2026/01/04 9:15 a.m.7 views

CVE-2026-0576

A vulnerability was detected in code-projects Online Product Reservation System 1.0. Affected is an unknown function of the file /handgunner-administrator/prod.php of the component Parameter Handler. Performing a manipulation of the argument cat/price/name/model/serial results in sql injection. I...

9.8CVSS0.00374EPSS
SaveExploits1References6
ATTACKERKB
ATTACKERKB
added 2026/01/04 9:2 a.m.5 views

CVE-2026-0576

A vulnerability was detected in code-projects Online Product Reservation System 1.0. Affected is an unknown function of the file /handgunner-administrator/prod.php of the component Parameter Handler. Performing a manipulation of the argument cat/price/name/model/serial results in sql injection. I...

9.8CVSS7.2AI score0.00374EPSS
SaveExploits1References6Affected Software1
EUVD
EUVD
added 2026/01/04 9:2 a.m.10 views

EUVD-2026-0781

A vulnerability was detected in code-projects Online Product Reservation System 1.0. Affected is an unknown function of the file /handgunner-administrator/prod.php of the component Parameter Handler. Performing manipulation of the argument cat/price/name/model/serial results in sql injection. It ...

7.5CVSS7.3AI score0.00374EPSS
SaveExploits1References8
Cvelist
Cvelist
added 2026/01/04 6:2 a.m.28 views

CVE-2026-0575 code-projects Online Product Reservation System Administrator Login adminlogin.php sql injection

A security vulnerability has been detected in code-projects Online Product Reservation System 1.0. This impacts an unknown function of the file /handgunner-administrator/adminlogin.php of the component Administrator Login. Such manipulation of the argument emailadd/pass leads to sql injection. Th...

7.5CVSS0.00374EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
added 2026/01/04 6:2 a.m.4 views

CVE-2026-0575 code-projects Online Product Reservation System Administrator Login adminlogin.php sql injection

A security vulnerability has been detected in code-projects Online Product Reservation System 1.0. This impacts an unknown function of the file /handgunner-administrator/adminlogin.php of the component Administrator Login. Such manipulation of the argument emailadd/pass leads to sql injection. Th...

7.5CVSS7.2AI score0.00374EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2026/01/04 12:0 a.m.12 views

PT-2026-1191

Name of the Vulnerable Software and Affected Versions Online Product Reservation System version 1.0 Description A flaw exists in the POST Parameter Handler component of the software, specifically within the /handgunner-administrator/edit.php file. The prod id, name, price, model, and serial...

7.5CVSS7.5AI score0.00374EPSS
SaveExploits1References13
Positive Technologies
Positive Technologies
added 2026/01/04 12:0 a.m.10 views

PT-2026-1186

Name of the Vulnerable Software and Affected Versions code-projects Online Product Reservation System version 1.0 Description A flaw exists in code-projects Online Product Reservation System 1.0, specifically within the Parameter Handler component. Manipulation of the cat/price/name/model/serial...

9.8CVSS6.8AI score0.00374EPSS
SaveExploits1References13
CNNVD
CNNVD
added 2026/01/04 12:0 a.m.7 views

Code-Projects Online Product Reservation System SQL注入漏洞

Code-Projects Online Product Reservation System is a Code-Projects open source online product reservation system. Code-Projects Online Product Reservation System version 1.0 has a SQL injection vulnerability, which originates from the incorrect operation of the parameter cat/price/name/model/seri...

9.8CVSS7.8AI score0.00374EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2026/01/04 12:0 a.m.15 views

PT-2026-1190

Name of the Vulnerable Software and Affected Versions code-projects Online Product Reservation System version 1.0 Description A flaw exists in an unknown functionality within the /handgunner-administrator/delete.php file. Manipulation of the ID parameter results in a SQL injection condition. This...

7.5CVSS7.3AI score0.00466EPSS
SaveExploits1References12
CNNVD
CNNVD
added 2026/01/04 12:0 a.m.7 views

Code-Projects Online Product Reservation System SQL注入漏洞

Code-Projects Online Product Reservation System is a Code-Projects open source online product reservation system. A SQL injection vulnerability exists in Code-Projects Online Product Reservation System version 1.0, which originates from the incorrect operation of the parameter ID in the file...

9.8CVSS7.7AI score0.00466EPSS
SaveExploits1References6
RedhatCVE
RedhatCVE
added 2025/12/16 8:44 p.m.9 views

CVE-2023-53877

Bus Reservation System 1.1 contains a SQL injection vulnerability in the pickupid parameter that allows attackers to manipulate database queries. Attackers can exploit boolean-based, error-based, and time-based blind SQL injection techniques to steal information from the database...

9.8CVSS7.7AI score0.00392EPSS
SaveExploits1References1
NVD
NVD
added 2025/12/15 9:15 p.m.11 views

CVE-2023-53877

Bus Reservation System 1.1 contains a SQL injection vulnerability in the pickupid parameter that allows attackers to manipulate database queries. Attackers can exploit boolean-based, error-based, and time-based blind SQL injection techniques to steal information from the database...

9.8CVSS0.00392EPSS
SaveExploits1References3
OSV
OSV
added 2025/12/15 9:15 p.m.7 views

CVE-2023-53877

Bus Reservation System 1.1 contains a SQL injection vulnerability in the pickupid parameter that allows attackers to manipulate database queries. Attackers can exploit boolean-based, error-based, and time-based blind SQL injection techniques to steal information from the database...

9.8CVSS5.8AI score0.00392EPSS
SaveExploits1References3
Rows per page
Query Builder