Lucene search
+L

10 matches found

NVD
NVD
•added 2026/09/07 10:16 a.m.•7 views

CVE-2026-86292

A vulnerability was detected in SourceCodester Simple Traffic Offense System 1.0. Affected is an unknown function of the file saveuser.php of the component User Creation. Performing a manipulation of the argument position results in missing authentication. The attack may be initiated remotely. Th...

7.5CVSS0.00686EPSS
SaveExploits0References6
NVD
NVD
•added 2026/09/07 10:16 a.m.•7 views

CVE-2026-86293

A flaw has been found in SourceCodester Simple Traffic Offense System 1.0. Affected by this vulnerability is an unknown functionality of the file delete-user.php of the component Deletion Endpoint. Executing a manipulation of the argument ID can lead to missing authentication. The attack may be...

6.9CVSS0.00758EPSS
SaveExploits0References6
CVE
CVE
•added 2026/09/07 10:00 a.m.•12 views

CVE-2026-86294

SourceCodester Simple Traffic Offense System 1.0 is affected by a cross-site scripting (XSS) vulnerability in the Settings Update Endpoint (file save-settings.php). The root cause is improper handling of the site_name/site_desc arguments, which can be manipulated by a remote, unauthenticated atta...

5.3CVSS3.7AI score0.0047EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/09/07 9:30 a.m.•8 views

EUVD-2026-72321

A vulnerability was detected in SourceCodester Simple Traffic Offense System 1.0. Affected is an unknown function of the file saveuser.php of the component User Creation. Performing a manipulation of the argument position results in missing authentication. The attack may be initiated remotely. Th...

7.5CVSS7AI score0.00686EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/09/07 9:30 a.m.•7 views

CVE-2026-86292 SourceCodester Simple Traffic Offense System User Creation saveuser.php missing authentication

A vulnerability was detected in SourceCodester Simple Traffic Offense System 1.0. Affected is an unknown function of the file saveuser.php of the component User Creation. Performing a manipulation of the argument position results in missing authentication. The attack may be initiated remotely. Th...

7.5CVSS7AI score0.00686EPSS
SaveExploits0References6
CVE
CVE
•added 2026/09/07 9:30 a.m.•15 views

CVE-2026-86292

SourceCodester Simple Traffic Offense System 1.0 is vulnerable to missing authentication in the User Creation component, specifically the file saveuser.php . Manipulating the position argument allows an unauthenticated remote attacker to bypass access controls, leading to low impacts on confident...

7.5CVSS7AI score0.00686EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/07 12:00 a.m.•2 views

CVE-2026-86294: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in SourceCodester Simple Traffic Offense System 1.0. Affected by this issue is some unknown functionality of the file save-settings.php of the component Settings Update Endpoint. The manipulation of the argument sitename/sitedesc leads to cross site scripting. Remot...

5.3CVSS4AI score0.0047EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•19 views

PT-2026-86668

A flaw has been found in SourceCodester Simple Traffic Offense System 1.0. Affected by this vulnerability is an unknown functionality of the file delete-user.php of the component Deletion Endpoint. Executing a manipulation of the argument ID can lead to missing authentication. The attack may be...

6.9CVSS6.3AI score0.00758EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/07 12:00 a.m.•1 views

CVE-2026-86292: Missing Authentication for Critical Function

A vulnerability was detected in SourceCodester Simple Traffic Offense System 1.0. Affected is an unknown function of the file saveuser.php of the component User Creation. Performing a manipulation of the argument position results in missing authentication. The attack may be initiated remotely. Th...

7.5CVSS5.4AI score0.00686EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/07 12:00 a.m.•2 views

CVE-2026-86293: Missing Authentication for Critical Function

A flaw has been found in SourceCodester Simple Traffic Offense System 1.0. Affected by this vulnerability is an unknown functionality of the file delete-user.php of the component Deletion Endpoint. Executing a manipulation of the argument ID can lead to missing authentication. The attack may be...

6.9CVSS5.4AI score0.00758EPSS
SaveExploits0References3
Rows per page
Query Builder