EUVD-2026-92161

A vulnerability was determined in SourceCodester Drug Recommendation System 1.0. Impacted is an unknown function of the file /Admin/editclass.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed...

CVE-2026-105176

The SourceCodester Drug Recommendation System 1.0 is vulnerable to a SQL injection vulnerability within an unknown function in the /Admin/edit_class.php file. This issue is triggered by the manipulation of the ID argument and can be executed remotely . The documents indicate that the exploit has ...

CVE-2026-105175

A SQL injection vulnerability exists in the SourceCodester Drug Recommendation System 1.0 within the Student Registration component. The flaw is located in the processing of the /Auth/add_student.php file, where the manipulation of the cmdschool argument allows for remote execution of SQL command...

CVE-2026-105175 SourceCodester Drug Recommendation System Student Registration add_student.php sql injection

A vulnerability was found in SourceCodester Drug Recommendation System 1.0. This issue affects some unknown processing of the file /Auth/addstudent.php of the component Student Registration. The manipulation of the argument cmdschool results in sql injection. The attack can be executed remotely...

EUVD-2026-92160

A vulnerability was found in SourceCodester Drug Recommendation System 1.0. This issue affects some unknown processing of the file /Auth/addstudent.php of the component Student Registration. The manipulation of the argument cmdschool results in sql injection. The attack can be executed remotely...

CVE-2026-105175 SourceCodester Drug Recommendation System Student Registration add_student.php sql injection

A vulnerability was found in SourceCodester Drug Recommendation System 1.0. This issue affects some unknown processing of the file /Auth/addstudent.php of the component Student Registration. The manipulation of the argument cmdschool results in sql injection. The attack can be executed remotely...

EUVD-2026-92145

A security flaw has been discovered in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This impacts an unknown function of the file delivery/delivery.php of the component Take Order Handler. The manipulation of the argument...

EUVD-2026-92144

A vulnerability was identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This affects an unknown function of the file admin/admin.php of the component Order Assignment Block. The manipulation of the argument...

EUVD-2026-92136

A vulnerability was determined in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The impacted element is an unknown function of the file admin/donate.php. Executing a manipulation of the argument location can lead to sql...

EUVD-2026-92132

A vulnerability was found in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The affected element is the function insert of the file fooddonateform.php of the component Food Donation Form. Performing a manipulation of the...

CVE-2023-49988

CVE-2023-49988 Hotel Booking Management v1.0 - SQL Injection Vulnerability in the "npss" parameter at rooms.php Description : A SQL Injection vulnerability exists in version 1 of the Hotel Booking Management. A malicious attacker can issue SQL commands to the MySQL database when editing the price...

CVE-2026-105168

A vulnerability was identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This affects an unknown function of the file admin/admin.php of the component Order Assignment Block. The manipulation of the argument...

CVE-2026-105169

A security flaw has been discovered in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This impacts an unknown function of the file delivery/delivery.php of the component Take Order Handler. The manipulation of the argument...

wp2shell

wp2shell Pre-authentication remote code execution for WordPress 6.9.0–6.9.4 and 7.0.0–7.0.1. Chains CVE-2026-63030 batch route confusion SQLi with CVE-2026-60137 customizer changeset re-entry to achieve unauthenticated administrator creation and OS command execution. No password cracking required...

poc-CVE-2019-9053

PoC CVE-2019-9053 - CMS Made Simple SQL Injection Educational PoC in Python 3 for CVE-2019-9053, a time-based blind SQL Injection vulnerability in CMS Made Simple = 2.2.9. This version has been modified for use in CTF/lab environments. It includes pre-configured prefixes to reduce extraction time...

EUVD-2026-92152

A vulnerability was detected in itsourcecode Online Admission System 1.0. Affected by this issue is some unknown functionality of the file /login1.php. Performing a manipulation of the argument User results in sql injection. The attack may be initiated remotely. The exploit is now public and may ...

CVE-2026-105172

The itsourcecode Online Admission System 1.0 is vulnerable to a SQL injection vulnerability in the /login1.php file. An attacker can initiate this attack remotely by manipulating the User argument. The provided documents indicate that the exploit is public and may be used, though specific remedia...

CVE-2026-105172 itsourcecode Online Admission System login1.php sql injection

A vulnerability was detected in itsourcecode Online Admission System 1.0. Affected by this issue is some unknown functionality of the file /login1.php. Performing a manipulation of the argument User results in sql injection. The attack may be initiated remotely. The exploit is now public and may ...

CVE-2026-88397

ApiAdmin v.5.0 and before is vulnerable to SQL Injection in the user-list endpoint GET /admin/User/getUsers via the gid parameter...

CVE-2026-88395

The software GouGuOA version v6.0.5 and before is vulnerable to an SQL Injection flaw located in the /home/message/rubbish endpoint. The vulnerability is triggered via the keywords parameter , which fails to properly neutralize special elements used in SQL commands (CWE-89). This flaw could allow...