Lucene search
+L

2770 matches found

CNNVD
CNNVD
added 2026/04/13 12:00 a.m.18 views

SourceCodester Pharmacy Sales and Inventory System SQL注入漏洞

SourceCodester Pharmacy Sales and Inventory System is an open-source medication sales and inventory management system developed by SourceCodester. Version 1.0 of the SourceCodester Pharmacy Sales and Inventory System contains a SQL injection vulnerability. This vulnerability arises from incorrect...

7.5CVSS7.2AI score0.00268EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/04/10 9:31 a.m.11 views

EUVD-2026-21340

A vulnerability has been found in code-projects Vehicle Showroom Management System 1.0. The affected element is an unknown function of the file /BranchManagement/ServiceAndSalesReport.php. The manipulation of the argument BRANCHID leads to cross site scripting. Remote exploitation of the attack i...

5.3CVSS4.3AI score0.00337EPSS
SaveExploits0References6
NVD
NVD
added 2026/04/10 8:16 a.m.10 views

CVE-2026-6035

A vulnerability has been found in code-projects Vehicle Showroom Management System 1.0. The affected element is an unknown function of the file /BranchManagement/ServiceAndSalesReport.php. The manipulation of the argument BRANCHID leads to cross site scripting. Remote exploitation of the attack i...

5.3CVSS0.00337EPSS
SaveExploits0References5
CVE
CVE
added 2026/04/10 8:00 a.m.26 views

CVE-2026-6035

Technical details about CVE-2026-6035 are not publicly provided in the supplied documents. Monitor for updates; no explicit information on affected components, impact, or remediation is available here.

5.3CVSS4.3AI score0.00337EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/04/10 8:00 a.m.5 views

CVE-2026-6035

A vulnerability has been found in code-projects Vehicle Showroom Management System 1.0. The affected element is an unknown function of the file /BranchManagement/ServiceAndSalesReport.php. The manipulation of the argument BRANCHID leads to cross site scripting. Remote exploitation of the attack i...

5.3CVSS4.3AI score0.00337EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 2026/04/10 8:00 a.m.44 views

CVE-2026-6035 code-projects Vehicle Showroom Management System ServiceAndSalesReport.php cross site scripting

A vulnerability has been found in code-projects Vehicle Showroom Management System 1.0. The affected element is an unknown function of the file /BranchManagement/ServiceAndSalesReport.php. The manipulation of the argument BRANCHID leads to cross site scripting. Remote exploitation of the attack i...

5.3CVSS0.00337EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2026/04/10 8:00 a.m.7 views

CVE-2026-6035 code-projects Vehicle Showroom Management System ServiceAndSalesReport.php cross site scripting

A vulnerability has been found in code-projects Vehicle Showroom Management System 1.0. The affected element is an unknown function of the file /BranchManagement/ServiceAndSalesReport.php. The manipulation of the argument BRANCHID leads to cross site scripting. Remote exploitation of the attack i...

5.3CVSS4.3AI score0.00337EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/04/10 12:00 a.m.13 views

PT-2026-31897

Name of the Vulnerable Software and Affected Versions code-projects Vehicle Showroom Management System version 1.0 Description A cross site scripting issue exists due to the manipulation of the BRANCH ID argument within an unknown function of the /BranchManagement/ServiceAndSalesReport.php file...

5.3CVSS4.9AI score0.00337EPSS
SaveExploits0References9
CNNVD
CNNVD
added 2026/04/10 12:00 a.m.17 views

Code-Projects Vehicle Showroom Management System 代码注入漏洞

The Code-Projects Vehicle Showroom Management System is an open-source system for managing automobile showrooms developed by Code-Projects. Version 1.0 of the Code-Projects Vehicle Showroom Management System contains a code injection vulnerability. This vulnerability arises from incorrect...

5.3CVSS5.7AI score0.00337EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/04/09 12:32 a.m.11 views

EUVD-2026-20803

A security flaw has been discovered in SourceCodester Pharmacy Product Management System 1.0. This affects an unknown part of the file add-sales.php of the component POST Parameter Handler. Performing a manipulation of the argument txtqty results in business logic errors. It is possible to initia...

5.5CVSS5.6AI score0.00241EPSS
SaveExploits0References6
NVD
NVD
added 2026/04/08 11:17 p.m.11 views

CVE-2026-5812

A security flaw has been discovered in SourceCodester Pharmacy Product Management System 1.0. This affects an unknown part of the file add-sales.php of the component POST Parameter Handler. Performing a manipulation of the argument txtqty results in business logic errors. It is possible to initia...

5.5CVSS0.00241EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/04/08 10:30 p.m.52 views

CVE-2026-5812 SourceCodester Pharmacy Product Management System POST Parameter add-sales.php logic error

A security flaw has been discovered in SourceCodester Pharmacy Product Management System 1.0. This affects an unknown part of the file add-sales.php of the component POST Parameter Handler. Performing a manipulation of the argument txtqty results in business logic errors. It is possible to initia...

5.5CVSS0.00241EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/04/08 10:30 p.m.9 views

CVE-2026-5812

A security flaw has been discovered in SourceCodester Pharmacy Product Management System 1.0. This affects an unknown part of the file add-sales.php of the component POST Parameter Handler. Performing a manipulation of the argument txtqty results in business logic errors. It is possible to initia...

5.5CVSS5.8AI score0.00241EPSS
SaveExploits0References5Affected Software1
CVE
CVE
added 2026/04/08 10:30 p.m.40 views

CVE-2026-5812

CVE-2026-5812 – SourceCodester Pharmacy Product Management System 1.0 : A flaw in add-sales.php (POST Parameter Handler) allows manipulation of the txtqty parameter, triggering business-logic errors. Exploitation can be remote; exploit publicly released. No explicit patch/version details or vendo...

5.5CVSS5.6AI score0.00241EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2026/04/08 10:30 p.m.6 views

CVE-2026-5812 SourceCodester Pharmacy Product Management System POST Parameter add-sales.php logic error

A security flaw has been discovered in SourceCodester Pharmacy Product Management System 1.0. This affects an unknown part of the file add-sales.php of the component POST Parameter Handler. Performing a manipulation of the argument txtqty results in business logic errors. It is possible to initia...

5.5CVSS5.8AI score0.00241EPSS
SaveExploits0References5
NVD
NVD
added 2026/04/08 10:16 p.m.19 views

CVE-2026-5810

A flaw has been found in SourceCodester Sales and Inventory System 1.0. Affected is an unknown function of the file /delete.php of the component GET Parameter Handler. This manipulation of the argument ID causes cross site scripting. Remote exploitation of the attack is possible. The exploit has...

5.1CVSS0.0024EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/04/08 10:00 p.m.7 views

CVE-2026-5810

A flaw has been found in SourceCodester Sales and Inventory System 1.0. Affected is an unknown function of the file /delete.php of the component GET Parameter Handler. This manipulation of the argument ID causes cross site scripting. Remote exploitation of the attack is possible. The exploit has...

5.1CVSS4.7AI score0.0024EPSS
SaveExploits0References5Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/08 10:00 p.m.8 views

CVE-2026-5810 SourceCodester Sales and Inventory System GET Parameter delete.php cross site scripting

A flaw has been found in SourceCodester Sales and Inventory System 1.0. Affected is an unknown function of the file /delete.php of the component GET Parameter Handler. This manipulation of the argument ID causes cross site scripting. Remote exploitation of the attack is possible. The exploit has...

5.1CVSS4.5AI score0.0024EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/04/08 10:00 p.m.38 views

CVE-2026-5810 SourceCodester Sales and Inventory System GET Parameter delete.php cross site scripting

A flaw has been found in SourceCodester Sales and Inventory System 1.0. Affected is an unknown function of the file /delete.php of the component GET Parameter Handler. This manipulation of the argument ID causes cross site scripting. Remote exploitation of the attack is possible. The exploit has...

5.1CVSS0.0024EPSS
SaveExploits0References5
CVE
CVE
added 2026/04/08 10:00 p.m.28 views

CVE-2026-5810

Summary (CVE-2026-5810): A flaw in SourceCodester Sales and Inventory System 1.0 affects an unknown function in /delete.php that handles the GET parameter ID. Manipulating this argument leads to cross-site scripting (XSS). Remote exploitation is possible, and the exploit has been published. CVSS ...

5.1CVSS4.7AI score0.0024EPSS
SaveExploits0References5
Rows per page
Query Builder