CVE-2026-105176

The SourceCodester Drug Recommendation System 1.0 is vulnerable to a SQL injection vulnerability within an unknown function in the /Admin/edit_class.php file. This issue is triggered by the manipulation of the ID argument and can be executed remotely . The documents indicate that the exploit has ...

EUVD-2026-92161

A vulnerability was determined in SourceCodester Drug Recommendation System 1.0. Impacted is an unknown function of the file /Admin/editclass.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed...

CVE-2026-105175 SourceCodester Drug Recommendation System Student Registration add_student.php sql injection

A vulnerability was found in SourceCodester Drug Recommendation System 1.0. This issue affects some unknown processing of the file /Auth/addstudent.php of the component Student Registration. The manipulation of the argument cmdschool results in sql injection. The attack can be executed remotely...

CVE-2026-105175

A SQL injection vulnerability exists in the SourceCodester Drug Recommendation System 1.0 within the Student Registration component. The flaw is located in the processing of the /Auth/add_student.php file, where the manipulation of the cmdschool argument allows for remote execution of SQL command...

EUVD-2026-92160

A vulnerability was found in SourceCodester Drug Recommendation System 1.0. This issue affects some unknown processing of the file /Auth/addstudent.php of the component Student Registration. The manipulation of the argument cmdschool results in sql injection. The attack can be executed remotely...

CVE-2026-105175 SourceCodester Drug Recommendation System Student Registration add_student.php sql injection

A vulnerability was found in SourceCodester Drug Recommendation System 1.0. This issue affects some unknown processing of the file /Auth/addstudent.php of the component Student Registration. The manipulation of the argument cmdschool results in sql injection. The attack can be executed remotely...

EUVD-2026-92145

A security flaw has been discovered in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This impacts an unknown function of the file delivery/delivery.php of the component Take Order Handler. The manipulation of the argument...

EUVD-2026-92144

A vulnerability was identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This affects an unknown function of the file admin/admin.php of the component Order Assignment Block. The manipulation of the argument...

EUVD-2026-92132

A vulnerability was found in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The affected element is the function insert of the file fooddonateform.php of the component Food Donation Form. Performing a manipulation of the...

EUVD-2026-92136

A vulnerability was determined in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The impacted element is an unknown function of the file admin/donate.php. Executing a manipulation of the argument location can lead to sql...

CVE-2023-49988

CVE-2023-49988 Hotel Booking Management v1.0 - rooms.php의 "npss" 매개변수에서 SQL 인젝션 취약점 설명 : Hotel Booking Management 버전 1에 SQL 인젝션 취약점이 존재합니다. 악의적인 공격자는 취약한 매개변수 npss, dpss, npsd, dpsd, npds, dpds, npdd, dpdd, npdst 또는 dpdst를 통해 숙박 옵션의 가격 및 할인을 수정할 때 MySQL 데이터베이스에 SQL 명령을 실행할 수 있습니다. 취약한 제품 버전 : Hot...

CVE-2026-105168

A vulnerability was identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This affects an unknown function of the file admin/admin.php of the component Order Assignment Block. The manipulation of the argument...

CVE-2026-105169

A security flaw has been discovered in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This impacts an unknown function of the file delivery/delivery.php of the component Take Order Handler. The manipulation of the argument...

wp2shell

wp2shell WordPress 6.9.0～6.9.4 および 7.0.0～7.0.1 に対する認証前のリモートコード実行。 CVE-2026-63030（バッチルート混乱による SQLi）と CVE-2026-60137（カスタマイザーの changeset 再エントリ）を連鎖させ、認証なしでの管理者作成と OS コマンド実行を実現します。パスワードクラックは不要です。 hashkitten による発見に感謝します。完全な SLCyber の技術分析はこちらをお読みください。 脆弱性 WordPress の REST API...

poc-CVE-2019-9053

PoC CVE-2019-9053 - CMS Made Simple SQL Injection Python 3 기반의 교육용 PoC로, CMS Made Simple = 2.2.9에서 발견된 time-based blind SQL Injection 취약점CVE-2019-9053을 위한 익스플로잇입니다. 이 버전은 CTF/실습 환경에서 사용할 수 있도록 수정되었습니다. 추출 시간을 단축하기 위해 미리 구성된 접두사prefix와 학생들이 익스플로잇 작동 방식을 이해하는 데 도움이 되는 포르투갈어 설명 메시지가 포함되어 있습니다. 경고 이...

CVE-2026-105172 itsourcecode Online Admission System login1.php sql injection

A vulnerability was detected in itsourcecode Online Admission System 1.0. Affected by this issue is some unknown functionality of the file /login1.php. Performing a manipulation of the argument User results in sql injection. The attack may be initiated remotely. The exploit is now public and may ...

CVE-2026-105172

The itsourcecode Online Admission System 1.0 is vulnerable to a SQL injection vulnerability in the /login1.php file. An attacker can initiate this attack remotely by manipulating the User argument. The provided documents indicate that the exploit is public and may be used, though specific remedia...

CVE-2026-105172 itsourcecode Online Admission System login1.php sql injection

A vulnerability was detected in itsourcecode Online Admission System 1.0. Affected by this issue is some unknown functionality of the file /login1.php. Performing a manipulation of the argument User results in sql injection. The attack may be initiated remotely. The exploit is now public and may ...

EUVD-2026-92152

A vulnerability was detected in itsourcecode Online Admission System 1.0. Affected by this issue is some unknown functionality of the file /login1.php. Performing a manipulation of the argument User results in sql injection. The attack may be initiated remotely. The exploit is now public and may ...

PT-2026-104664

A vulnerability was found in SourceCodester Drug Recommendation System 1.0. This issue affects some unknown processing of the file /Auth/add student.php of the component Student Registration. The manipulation of the argument cmdschool results in sql injection. The attack can be executed remotely...