262619 matches found
CVE-2026-90514 SourceCodester School Registration and Fee System save_stud.php sql injection
A vulnerability has been found in SourceCodester School Registration and Fee System 1.0. Impacted is an unknown function of the file /bilal/normal/savestud.php. Such manipulation of the argument Status leads to sql injection. It is possible to launch the attack remotely. The exploit has been...
CVE-2026-90514
SourceCodester School Registration and Fee System 1.0 is vulnerable to SQL injection via the Status argument in the file /bilal/normal/save_stud.php (function unspecified). The attack is remote and requires no authentication , rated CVSS 3.1: 7.3 (HIGH) with low impact on confidentiality, integri...
EUVD-2026-76984
A vulnerability was detected in GongShengyue OnlineBooks up to dfc5eacc08d3b0396c266049548618f6fb9587ea. This vulnerability affects unknown code of the file src/cn/ylcto/book/servlet/BooksServlet.java of the component listSplit Interface. The manipulation of the argument column results in sql...
CVE-2026-90511 GongShengyue OnlineBooks listSplit BooksServlet.java sql injection
A vulnerability was detected in GongShengyue OnlineBooks up to dfc5eacc08d3b0396c266049548618f6fb9587ea. This vulnerability affects unknown code of the file src/cn/ylcto/book/servlet/BooksServlet.java of the component listSplit Interface. The manipulation of the argument column results in sql...
CVE-2026-90511
A SQL injection vulnerability exists in GongShengyue OnlineBooks (up to commit dfc5eacc) in the listSplit interface of the file src/cn/ylcto/book/servlet/BooksServlet.java. Manipulation of the column argument allows a remote, low-privilege attacker to inject SQL, impacting confidentiality, integr...
CVE-2026-90511 GongShengyue OnlineBooks listSplit BooksServlet.java sql injection
A vulnerability was detected in GongShengyue OnlineBooks up to dfc5eacc08d3b0396c266049548618f6fb9587ea. This vulnerability affects unknown code of the file src/cn/ylcto/book/servlet/BooksServlet.java of the component listSplit Interface. The manipulation of the argument column results in sql...
Exploit for SQL Injection in Apache Superset
CVE-2026...
world-of-b0t
World Of B0t Cyberpunk security pentest lab for testing AI au...
CVE-2026-90496
A vulnerability was found in Fengoffice Feng Office up to 3.11.13.11. Affected is the function updatesystemmoduleorder/updatedimensionorder of the file application/controllers/MoreController.class.php of the component Reorder Handlers. Performing a manipulation of the argument modules/dims result...
CVE-2026-90496 Fengoffice Feng Office Reorder Handlers MoreController.class.php update_dimension_order sql injection
A vulnerability was found in Fengoffice Feng Office up to 3.11.13.11. Affected is the function updatesystemmoduleorder/updatedimensionorder of the file application/controllers/MoreController.class.php of the component Reorder Handlers. Performing a manipulation of the argument modules/dims result...
EUVD-2026-76949
A vulnerability was found in Fengoffice Feng Office up to 3.11.13.11. Affected is the function updatesystemmoduleorder/updatedimensionorder of the file application/controllers/MoreController.class.php of the component Reorder Handlers. Performing a manipulation of the argument modules/dims result...
CVE-2026-90496 Fengoffice Feng Office Reorder Handlers MoreController.class.php update_dimension_order sql injection
A vulnerability was found in Fengoffice Feng Office up to 3.11.13.11. Affected is the function updatesystemmoduleorder/updatedimensionorder of the file application/controllers/MoreController.class.php of the component Reorder Handlers. Performing a manipulation of the argument modules/dims result...
CVE-2026-90496
A SQL injection vulnerability exists in Fengoffice Feng Office versions up to 3.11.13.11 , affecting the update_system_module_order/update_dimension_order functions in the file application/controllers/MoreController.class.php (component: Reorder Handlers ). An authenticated attacker (high privile...
CVE-2026-90495
A vulnerability has been found in Fengoffice Feng Office up to 3.11.13.11. This impacts the function Contacts::instance-findAll of the file application/models/CompanyWebsite.class.php of the component Legacy API. Such manipulation of the argument auth leads to sql injection. The attack can be...
CVE-2026-90495 Fengoffice Feng Office Legacy API CompanyWebsite.class.php instance->findAll sql injection
A vulnerability has been found in Fengoffice Feng Office up to 3.11.13.11. This impacts the function Contacts::instance-findAll of the file application/models/CompanyWebsite.class.php of the component Legacy API. Such manipulation of the argument auth leads to sql injection. The attack can be...
CVE-2026-90495 Fengoffice Feng Office Legacy API CompanyWebsite.class.php instance->findAll sql injection
A vulnerability has been found in Fengoffice Feng Office up to 3.11.13.11. This impacts the function Contacts::instance-findAll of the file application/models/CompanyWebsite.class.php of the component Legacy API. Such manipulation of the argument auth leads to sql injection. The attack can be...
CVE-2026-90495
Fengoffice Feng Office versions up to 3.11.13.11 contain a SQL injection vulnerability in the Legacy API component, specifically in the function Contacts::instance->findAll within the file application/models/CompanyWebsite.class.php. Manipulation of the auth argument allows a remote, unauthent...
EUVD-2026-76942
A vulnerability has been found in Fengoffice Feng Office up to 3.11.13.11. This impacts the function Contacts::instance-findAll of the file application/models/CompanyWebsite.class.php of the component Legacy API. Such manipulation of the argument auth leads to sql injection. The attack can be...
PT-2026-90843
Name of the Vulnerable Software and Affected Versions SourceCodester School Registration and Fee System version 1.0 Description A remote SQL injection is possible due to improper handling of the selector argument within an unknown function in the /bilal/normal/delete stud.php file. SQL injection ...