Lucene search
+L

16501 matches found

Cvelist
Cvelist
added 2026/07/04 9:00 p.m.43 views

CVE-2026-14654 SourceCodester Simple and Nice Shopping Cart Script girlsproductdeletequery.php sql injection

A vulnerability was identified in SourceCodester Simple and Nice Shopping Cart Script 1.0. Affected is an unknown function of the file /admin/girlsproductdeletequery.php. Such manipulation of the argument userid leads to sql injection. The attack can be executed remotely. The exploit is publicly...

7.5CVSS0.00269EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2026/07/04 9:00 p.m.21 views

CVE-2026-14654

A vulnerability was identified in SourceCodester Simple and Nice Shopping Cart Script 1.0. Affected is an unknown function of the file /admin/girlsproductdeletequery.php. Such manipulation of the argument userid leads to sql injection. The attack can be executed remotely. The exploit is publicly...

7.5CVSS5.9AI score0.00269EPSS
SaveExploits0References6Affected Software1
EUVD
EUVD
added 2026/07/04 9:00 p.m.16 views

EUVD-2026-41698

A vulnerability was identified in SourceCodester Simple and Nice Shopping Cart Script 1.0. Affected is an unknown function of the file /admin/girlsproductdeletequery.php. Such manipulation of the argument userid leads to sql injection. The attack can be executed remotely. The exploit is publicly...

7.5CVSS6.9AI score0.00269EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2026/07/04 8:45 p.m.11 views

CVE-2026-14653

A vulnerability was determined in SourceCodester Simple and Nice Shopping Cart Script 1.0. This impacts an unknown function of the file /admin/mensproductdeletequery.php. This manipulation of the argument userid causes sql injection. Remote exploitation of the attack is possible. The exploit has...

7.5CVSS5.8AI score0.00269EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
added 2026/07/04 8:45 p.m.43 views

CVE-2026-14653 SourceCodester Simple and Nice Shopping Cart Script mensproductdeletequery.php sql injection

A vulnerability was determined in SourceCodester Simple and Nice Shopping Cart Script 1.0. This impacts an unknown function of the file /admin/mensproductdeletequery.php. This manipulation of the argument userid causes sql injection. Remote exploitation of the attack is possible. The exploit has...

7.5CVSS0.00269EPSS
SaveExploits0References6
CVE
CVE
added 2026/07/04 8:45 p.m.37 views

CVE-2026-14653

SourceCodester Simple and Nice Shopping Cart Script 1.0 contains an SQL injection in /admin/mensproductdeletequery.php exposed by manipulating the user_id argument. The vulnerability is remotely exploitable (attack vector: NETWORK) with LOW to MEDIUM impacts per CVSS data: Confidentiality, Integr...

7.5CVSS6.8AI score0.00269EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/07/04 8:45 p.m.16 views

EUVD-2026-41697

A vulnerability was determined in SourceCodester Simple and Nice Shopping Cart Script 1.0. This impacts an unknown function of the file /admin/mensproductdeletequery.php. This manipulation of the argument userid causes sql injection. Remote exploitation of the attack is possible. The exploit has...

7.5CVSS6.8AI score0.00269EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/07/04 8:30 p.m.51 views

CVE-2026-14652 SourceCodester Simple and Nice Shopping Cart Script Admin Login login.php sql injection

A vulnerability was found in SourceCodester Simple and Nice Shopping Cart Script 1.0. This affects an unknown function of the file /admin/login.php of the component Admin Login. The manipulation of the argument Username results in sql injection. The attack may be launched remotely. The exploit ha...

7.5CVSS0.00269EPSS
SaveExploits0References6
CVE
CVE
added 2026/07/04 8:30 p.m.40 views

CVE-2026-14652

The affected software is SourceCodester Simple and Nice Shopping Cart Script 1.0. A SQL injection vulnerability exists in the Admin Login component, specifically in /admin/login.php where manipulating the Username argument can compromise the system. The issue can be exploited remotely and the exp...

7.5CVSS6.8AI score0.00269EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/07/04 8:30 p.m.24 views

EUVD-2026-41696

A vulnerability was found in SourceCodester Simple and Nice Shopping Cart Script 1.0. This affects an unknown function of the file /admin/login.php of the component Admin Login. The manipulation of the argument Username results in sql injection. The attack may be launched remotely. The exploit ha...

7.5CVSS6.8AI score0.00269EPSS
SaveExploits0References6
NVD
NVD
added 2026/07/04 7:16 p.m.19 views

CVE-2026-14641

A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality of the file /editcourse.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit h...

7.5CVSS0.00266EPSS
SaveExploits0References7
NVD
NVD
added 2026/07/04 7:16 p.m.17 views

CVE-2026-14642

A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected by this issue is some unknown functionality of the file /editclass2.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit is...

7.5CVSS0.00269EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/07/04 6:45 p.m.53 views

CVE-2026-14642 SourceCodester Class and Exam Timetabling System edit_class2.php sql injection

A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected by this issue is some unknown functionality of the file /editclass2.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit is...

7.5CVSS0.00269EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2026/07/04 6:45 p.m.14 views

CVE-2026-14642

A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected by this issue is some unknown functionality of the file /editclass2.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit is...

7.5CVSS6.9AI score0.00269EPSS
SaveExploits0References6Affected Software1
CVE
CVE
added 2026/07/04 6:45 p.m.36 views

CVE-2026-14642

SourceCodester Class and Exam Timetabling System 1.0 contains a SQL injection in the /edit_class2.php endpoint caused by unsafely manipulated ID parameter. The vulnerability is remote and publicly exploitable (PoC). CVSS data from multiple sources indicate a NETWORK attack with low complexity and...

7.5CVSS6.9AI score0.00269EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/07/04 6:45 p.m.16 views

EUVD-2026-41690

A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected by this issue is some unknown functionality of the file /editclass2.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit is...

7.5CVSS6.9AI score0.00269EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2026/07/04 6:30 p.m.12 views

CVE-2026-14641

A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality of the file /editcourse.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit h...

7.5CVSS6.9AI score0.00266EPSS
SaveExploits0References7Affected Software1
Cvelist
Cvelist
added 2026/07/04 6:30 p.m.44 views

CVE-2026-14641 SourceCodester Class and Exam Timetabling System edit_course.php sql injection

A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality of the file /editcourse.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit h...

7.5CVSS0.00266EPSS
SaveExploits0References7
EUVD
EUVD
added 2026/07/04 6:30 p.m.19 views

EUVD-2026-41689

A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality of the file /editcourse.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit h...

7.5CVSS6.9AI score0.00266EPSS
SaveExploits0References7
CVE
CVE
added 2026/07/04 6:30 p.m.33 views

CVE-2026-14641

SourceCodester Class and Exam Timetabling System 1.0 is affected by a SQL injection in the unknown functionality of /edit_course.php, triggered by manipulating the ID parameter. The vulnerability can be exploited remotely and has publicly disclosed exploits. The exact affected component, impact s...

7.5CVSS6.9AI score0.00266EPSS
SaveExploits0References7
Rows per page
Query Builder