264548 matches found
CVE-2026-86309
itsourcecode Sales and Inventory System 1.0 is vulnerable to SQL injection via the ID argument in the file /pages/pro_searchfrm.php . The attack can be initiated remotely with low privileges and no user interaction, resulting in low impact on confidentiality, integrity, and availability (CVSS 3.1...
CVE-2026-86309 itsourcecode Sales and Inventory System pro_searchfrm.php sql injection
A flaw has been found in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/prosearchfrm.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used...
EUVD-2026-72410
A flaw has been found in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/prosearchfrm.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used...
CVE-2026-86309 itsourcecode Sales and Inventory System pro_searchfrm.php sql injection
A flaw has been found in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/prosearchfrm.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used...
OSWAP-top10-handson-practical-writeups-report
Cybersecurity Lab Write-Ups Hands-on write-ups from a local,...
CVE-2026-19634
A flaw was found in PostgreSQL Anonymizer. A SQL injection vulnerability exists in the importdatabaserules and importrolesrules functions. A malicious user can craft a JSON document with specially designed object names. If a superuser then imports this document, the malicious code within it can b...
CVE-2026-86298
A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. Impacted is an unknown function of the file /deletesubject.php. Performing a manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The exploit has been...
EUVD-2026-72347
A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. Impacted is an unknown function of the file /deletesubject.php. Performing a manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The exploit has been...
CVE-2026-86298 SourceCodester Class and Exam Timetabling System delete_subject.php sql injection
A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. Impacted is an unknown function of the file /deletesubject.php. Performing a manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The exploit has been...
CVE-2026-86298
CVE-2026-86298 affects SourceCodester Class and Exam Timetabling System 1.0 , where an unauthenticated remote attacker can exploit a SQL injection vulnerability in the /delete_subject.php file by manipulating the ID parameter. The flaw is rated CVSS 3.1: 7.3 (HIGH) with low impact on confidential...
CVE-2026-86298 SourceCodester Class and Exam Timetabling System delete_subject.php sql injection
A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. Impacted is an unknown function of the file /deletesubject.php. Performing a manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The exploit has been...
wp2shell-poc
wp2shell-poc Independent proof-of-concept for the unauthentic...
CVE-2026-86291
A security vulnerability has been detected in itsourcecode Sales and Inventory System 1.0. This impacts an unknown function of the file /pages/usedit1.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed publicly and...
Exploit for SQL Injection in Google Android
CVE-2026-28576: SQL Injection in the Android Contacts Provider...
CVE-2026-86290
A weakness has been identified in SourceCodester Online Voting System 1.0. This affects an unknown function of the file /voting/ajax.php?action=savecategory. This manipulation of the argument Category causes sql injection. The attack can be initiated remotely. The exploit has been made available ...
EUVD-2026-72320
A security vulnerability has been detected in itsourcecode Sales and Inventory System 1.0. This impacts an unknown function of the file /pages/usedit1.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed publicly and...
CVE-2026-86291 itsourcecode Sales and Inventory System us_edit1.php sql injection
A security vulnerability has been detected in itsourcecode Sales and Inventory System 1.0. This impacts an unknown function of the file /pages/usedit1.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed publicly and...
CVE-2026-86291 itsourcecode Sales and Inventory System us_edit1.php sql injection
A security vulnerability has been detected in itsourcecode Sales and Inventory System 1.0. This impacts an unknown function of the file /pages/usedit1.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed publicly and...
CVE-2026-86291
itsourcecode Sales and Inventory System 1.0 is affected by a SQL injection in the file /pages/us_edit1.php via manipulation of the ID parameter. The vulnerability is exploitable remotely and requires low privileges with no user interaction. A proof-of-concept exploit has been disclosed publicly, ...
CVE-2026-86290 SourceCodester Online Voting System ajax.php save_category sql injection
A weakness has been identified in SourceCodester Online Voting System 1.0. This affects an unknown function of the file /voting/ajax.php?action=savecategory. This manipulation of the argument Category causes sql injection. The attack can be initiated remotely. The exploit has been made available ...