251842 matches found
CVE-2026-105232
A SQL injection vulnerability exists in the Registration Page component of the kishor-23 food-waste-management-system (specifically within the delivery/deliverysignup.php file). The flaw is caused by the improper manipulation of the username , email , or location arguments, allowing for remote ex...
EUVD-2026-92254
A flaw has been found in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The impacted element is an unknown function of the file delivery/deliverysignup.php of the component Registration Page. This manipulation of the...
CVE-2026-105229
A weakness has been identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This issue affects some unknown processing of the file signup.php of the component User Registration Endpoint. Executing a manipulation of th...
CVE-2026-105231 kishor-23 food-waste-management-system Admin Registration signup.php sql injection
A vulnerability was detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The affected element is an unknown function of the file admin/signup.php of the component Admin Registration. The manipulation of the argument...
CVE-2026-105231
A SQL injection vulnerability exists in the Admin Registration component of the kishor-23 food-waste-management-system . Specifically, an unknown function within the admin/signup.php file fails to properly sanitize inputs, allowing an attacker to manipulate the email , username , or location argu...
EUVD-2026-92253
A vulnerability was detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The affected element is an unknown function of the file admin/signup.php of the component Admin Registration. The manipulation of the argument...
EUVD-2026-92252
A security vulnerability has been detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. Impacted is an unknown function of the file delivery/deliverymyord.php. The manipulation of the argument deliverypersonid/orderid...
CVE-2026-105230
The kishor-23 food-waste-management-system is vulnerable to a SQL injection vulnerability within an unknown function of the delivery/deliverymyord.php file. Attackers can remotely initiate this attack by manipulating the delivery_person_id/order_id arguments. While the exploit has been disclosed ...
CVE-2026-105230 kishor-23 food-waste-management-system deliverymyord.php sql injection
A security vulnerability has been detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. Impacted is an unknown function of the file delivery/deliverymyord.php. The manipulation of the argument deliverypersonid/orderid...
CVE-2026-9082
🚨 CVE-2026-9082:Drupal核心中的SQL注入漏洞 Drupal核心中的高影响力SQL注入漏洞(PostgreSQL) 📋 概述 CVE-2026-9082 是Drupal核心数据库抽象层中的一个SQL注入 漏洞。仅影响使用PostgreSQL 作为数据库后端的站点。 该漏洞允许未经身份验证的攻击者执行任意SQL注入,可能导致数据泄露、权限提升,最严重情况下可实现远程代码执行。 ⚠️ 这是真实世界的严重安全公告(SA-CORE-2026-004) 🛡️ 严重程度 指标| 值 ---|--- CVSS v3 分数| 6.5(中危) 攻击向量| 网络 攻击复杂度| 低 所需权限|...
EUVD-2026-92251
A weakness has been identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This issue affects some unknown processing of the file signup.php of the component User Registration Endpoint. Executing a manipulation of th...
CVE-2026-105229 kishor-23 food-waste-management-system User Registration Endpoint signup.php sql injection
A weakness has been identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This issue affects some unknown processing of the file signup.php of the component User Registration Endpoint. Executing a manipulation of th...
CVE-2026-105229
A SQL injection vulnerability exists in the User Registration Endpoint of the kishor-23 food-waste-management-system . The flaw is located in the signup.php file, where improper processing of the email , name , and gender arguments allows for remote exploitation. Due to a rolling release system, ...
CVE-2026-105229 kishor-23 food-waste-management-system User Registration Endpoint signup.php sql injection
A weakness has been identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This issue affects some unknown processing of the file signup.php of the component User Registration Endpoint. Executing a manipulation of th...
CVE-2024-44541
CVE-2024-44541: Vulnerabilidad de Inyección SQL en Inventio Lite v4 Descripción Inventio Lite v4 es vulnerable a Inyección SQL SQLi en el endpoint /action=processlogin. Esta vulnerabilidad permite a los atacantes inyectar consultas SQL arbitrarias a través del parámetro username en solicitudes...
CVE-2026-105187
A vulnerability has been found in itsourcecode Online Admission System 1.0. Affected is an unknown function of the file /admin/key.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used...
CVE-2026-105186
A flaw has been found in itsourcecode Online Admission System 1.0. This impacts an unknown function of the file /new.php. Executing a manipulation of the argument schedid can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be used...
CVE-2026-105185
A vulnerability was detected in itsourcecode Online Admission System 1.0. This affects an unknown function of the file /admin/examinee.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit is now public and may be used...
CVE-2026-26980
CVE-2026-26980 — 👻 Ghost CMS Inyección SQL no autenticada vía Content API Una vulnerabilidad de inyección SQL existía en la API de contenido de Ghost que permitía a atacantes no autenticados leer datos arbitrarios de la base de datos. | ---|--- CVE| CVE-2026-26980 CVSS| 9.4 Crítico Afecta| Ghost ...
CVE-2026-26980-PoC
CVE-2026-26980 — Inyección SQL ciega en la API de contenido de Ghost CMS Afectado: Ghost 3.24.0 – 6.19.0 Corregido en: Ghost 6.19.1 Autenticación requerida: Ninguna — la clave de API de contenido es pública Impacto: Lectura no autenticada de toda la base de datos credenciales, claves de API...