Lucene search
K

23 matches found

NVD
NVD
added 2026/03/08 4:16 p.m.1 views

CVE-2026-3746

A vulnerability was determined in SourceCodester Simple Responsive Tourism Website 1.0. Affected by this vulnerability is an unknown functionality of the file /tourism/classes/Login.php?f=login of the component Login. This manipulation of the argument Username causes sql injection. The attack may...

9.8CVSS0.00076EPSS
Exploits1References6
Cvelist
Cvelist
added 2026/03/08 3:32 p.m.32 views

CVE-2026-3746 SourceCodester Simple Responsive Tourism Website Login Login.php sql injection

A vulnerability was determined in SourceCodester Simple Responsive Tourism Website 1.0. Affected by this vulnerability is an unknown functionality of the file /tourism/classes/Login.php?f=login of the component Login. This manipulation of the argument Username causes sql injection. The attack may...

7.5CVSS0.00076EPSS
Exploits1References6
CVE
CVE
added 2026/03/08 3:32 p.m.4 views

CVE-2026-3746

Consolidated details across multiple sources identify CVE-2026-3746 as a SQL injection in SourceCodester Simple Responsive Tourism Website 1.0, affecting the Login component’s file /tourism/classes/Login.php?f=login. The bug arises from manipulating the Username argument, enabling remote exploita...

9.8CVSS6.9AI score0.00076EPSS
Exploits1References6Affected Software1
Vulnrichment
Vulnrichment
added 2026/02/20 4:2 p.m.3 views

CVE-2026-2848 SourceCodester Simple Responsive Tourism Website Registration Master.php sql injection

A flaw has been found in SourceCodester Simple Responsive Tourism Website 1.0. Affected by this vulnerability is an unknown functionality of the file /classes/Master.php?f=register of the component Registration. This manipulation of the argument Username causes sql injection. The attack may be...

7.5CVSS7.1AI score0.00045EPSS
Exploits2References5
ATTACKERKB
ATTACKERKB
added 2026/02/20 4:2 p.m.5 views

CVE-2026-2848

A flaw has been found in SourceCodester Simple Responsive Tourism Website 1.0. Affected by this vulnerability is an unknown functionality of the file /classes/Master.php?f=register of the component Registration. This manipulation of the argument Username causes sql injection. The attack may be...

9.8CVSS7.1AI score0.00045EPSS
Exploits2References5Affected Software1
Positive Technologies
Positive Technologies
added 2026/02/20 12:0 a.m.5 views

PT-2026-21246

Name of the Vulnerable Software and Affected Versions SourceCodester Simple Responsive Tourism Website version 1.0 Description A flaw exists in SourceCodester Simple Responsive Tourism Website that allows for SQL injection. This issue is related to the manipulation of the Username argument within...

9.8CVSS7.1AI score0.00045EPSS
Exploits2References8
CNNVD
CNNVD
added 2026/02/20 12:0 a.m.3 views

SourceCodester Simple Responsive Tourism Website SQL注入漏洞

SourceCodester Simple Responsive Tourism Website is an open-source tourism website developed by SourceCodester. Version 1.0 of SourceCodester Simple Responsive Tourism Website has a SQL injection vulnerability. This vulnerability stems from incorrect handling of the parameter Username in the...

9.8CVSS7.2AI score0.00045EPSS
Exploits2References5
RedhatCVE
RedhatCVE
added 2026/02/09 7:23 p.m.2 views

CVE-2026-2160

A vulnerability has been found in SourceCodester Simple Responsive Tourism Website 1.0. Affected by this vulnerability is an unknown functionality of the file /tourism/classes/Master.php?f=savepackage. The manipulation of the argument Title leads to cross site scripting. The attack can be initiat...

6.1CVSS3.8AI score0.00044EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/02/09 7:23 p.m.2 views

CVE-2026-2159

A flaw has been found in SourceCodester Simple Responsive Tourism Website 1.0. Affected is an unknown function of the file /tourism/classes/Master.php?f=register of the component Registration. Executing a manipulation of the argument firstname/lastname/username can lead to cross site scripting. I...

6.1CVSS3.7AI score0.00017EPSS
Exploits1References1
Cvelist
Cvelist
added 2026/02/08 3:32 p.m.30 views

CVE-2026-2160 SourceCodester Simple Responsive Tourism Website Master.php cross site scripting

A vulnerability has been found in SourceCodester Simple Responsive Tourism Website 1.0. Affected by this vulnerability is an unknown functionality of the file /tourism/classes/Master.php?f=savepackage. The manipulation of the argument Title leads to cross site scripting. The attack can be initiat...

5.3CVSS0.00044EPSS
Exploits1References5
CVE
CVE
added 2026/02/08 3:32 p.m.9 views

CVE-2026-2160

The CVE-2026-2160 entry affects SourceCodester Simple Responsive Tourism Website 1.0. Affected component: /tourism/classes/Master.php?f=save_package. The vulnerability arises from manipulating the Title parameter, enabling cross-site scripting. Exploitation can be performed remotely and public ex...

6.1CVSS3.7AI score0.00044EPSS
Exploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2026/02/08 3:32 p.m.3 views

CVE-2026-2160 SourceCodester Simple Responsive Tourism Website Master.php cross site scripting

A vulnerability has been found in SourceCodester Simple Responsive Tourism Website 1.0. Affected by this vulnerability is an unknown functionality of the file /tourism/classes/Master.php?f=savepackage. The manipulation of the argument Title leads to cross site scripting. The attack can be initiat...

5.3CVSS3.8AI score0.00044EPSS
Exploits1References5
EUVD
EUVD
added 2026/02/08 3:32 p.m.3 views

EUVD-2026-5789

A vulnerability has been found in SourceCodester Simple Responsive Tourism Website 1.0. Affected by this vulnerability is an unknown functionality of the file /tourism/classes/Master.php?f=savepackage. The manipulation of the argument Title leads to cross site scripting. The attack can be initiat...

6.1CVSS3.6AI score0.00044EPSS
Exploits1References5
ATTACKERKB
ATTACKERKB
added 2026/02/08 3:32 p.m.2 views

CVE-2026-2159

A flaw has been found in SourceCodester Simple Responsive Tourism Website 1.0. Affected is an unknown function of the file /tourism/classes/Master.php?f=register of the component Registration. Executing a manipulation of the argument firstname/lastname/username can lead to cross site scripting. I...

5.3CVSS3.5AI score0.00017EPSS
Exploits1References5Affected Software1
CVE
CVE
added 2026/02/08 3:32 p.m.9 views

CVE-2026-2159

SourceCodester Simple Responsive Tourism Website 1.0 contains a cross-site scripting flaw in the Registration module. Affected area is an unknown function in /tourism/classes/Master.php?f=register where manipulating firstname/lastname/username can trigger XSS. Exploit published; attack is remote ...

6.1CVSS3.5AI score0.00017EPSS
Exploits1References5Affected Software1
CNNVD
CNNVD
added 2026/02/08 12:0 a.m.2 views

SourceCodester Simple Responsive Tourism Website 代码注入漏洞

SourceCodester Simple Responsive Tourism Website is an open-source tourism website developed by SourceCodester. Version 1.0 of SourceCodester Simple Responsive Tourism Website has a code injection vulnerability. This vulnerability stems from incorrect handling of the parameter “Title” in the...

6.1CVSS5.7AI score0.00044EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2026/02/08 12:0 a.m.3 views

PT-2026-6990

Name of the Vulnerable Software and Affected Versions SourceCodester Simple Responsive Tourism Website version 1.0 Description A flaw exists in SourceCodester Simple Responsive Tourism Website version 1.0, specifically within an unknown function of the file /tourism/classes/Master.php?f=register...

5.3CVSS3.7AI score0.00017EPSS
Exploits1References7
Positive Technologies
Positive Technologies
added 2026/02/08 12:0 a.m.4 views

PT-2026-6991

Name of the Vulnerable Software and Affected Versions SourceCodester Simple Responsive Tourism Website version 1.0 Description A flaw exists in SourceCodester Simple Responsive Tourism Website that allows for cross site scripting. This issue is triggered through manipulation of the Title argument...

5.3CVSS4AI score0.00044EPSS
Exploits1References7
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-23332

Malicious code in bioql PyPI...

6.1CVSS4.9AI score0.00245EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2023/02/26 12:0 a.m.1 views

PT-2023-16710 · Sourcecodester · Sourcecodester Simple Responsive Tourism Website

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Responsive Tourism Website version 1.0 Description: A problematic issue was found in the software, affecting the /tourism/rate review.php file. The manipulation of the id argument with malicious input, such as 1"alert111...

6.1CVSS4.1AI score0.00245EPSS
Exploits1References4
Rows per page
Query Builder