Lucene search
+L

16501 matches found

Positive Technologies
Positive Technologies
added 2026/07/04 12:00 a.m.26 views

PT-2026-55734

Name of the Vulnerable Software and Affected Versions SourceCodester Simple and Nice Shopping Cart Script version 1.0 Description An issue exists in the /admin/girlsproductdeletequery.php file where improper handling of the user id variable allows for remote SQL injection. SQL injection is a...

7.5CVSS7.2AI score0.00269EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2026/07/04 12:00 a.m.22 views

PT-2026-55724

Name of the Vulnerable Software and Affected Versions SourceCodester Class and Exam Timetabling System version 1.0 Description An issue exists in the /edit course.php endpoint where manipulation of the ID variable allows for remote SQL injection. SQL injection is a technique where malicious SQL...

7.5CVSS7.1AI score0.00266EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
added 2026/07/04 12:00 a.m.33 views

PT-2026-55732

Name of the Vulnerable Software and Affected Versions SourceCodester Simple and Nice Shopping Cart Script version 1.0 Description An SQL injection issue exists in the Admin Login component within the /admin/login.php endpoint. The flaw allows remote attackers to manipulate the Username variable t...

7.5CVSS7.4AI score0.00269EPSS
SaveExploits0References11
NVD
NVD
added 2026/07/03 8:16 p.m.25 views

CVE-2026-14608

A security vulnerability has been detected in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. This vulnerability affects unknown code of the file /index.php?action=viewstudent of the component POST Handler. The manipulation of the argument ID leads to authorization...

5.3CVSS0.00223EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/07/03 8:15 p.m.13 views

EUVD-2026-41611

A vulnerability was detected in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. This issue affects some unknown processing. The manipulation results in session fixiation. The attack can be executed remotely. The attack requires a high level of complexity. The...

6.3CVSS5.7AI score0.00321EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/07/03 8:15 p.m.11 views

CVE-2026-14609

A vulnerability was detected in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. This issue affects some unknown processing. The manipulation results in session fixiation. The attack can be executed remotely. The attack requires a high level of complexity. The...

6.3CVSS5.4AI score0.00321EPSS
SaveExploits0References6Affected Software1
CVE
CVE
added 2026/07/03 8:15 p.m.29 views

CVE-2026-14609

Technical details about CVE-2026-14609 are not publicly available in the provided documents. Monitor for updates from official advisories and vendor advisories for affected components and remediation steps.

6.3CVSS5.7AI score0.00321EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/07/03 8:15 p.m.50 views

CVE-2026-14609 SourceCodester CET Automated Grading System with AI Predictive Analytics session fixiation

A vulnerability was detected in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. This issue affects some unknown processing. The manipulation results in session fixiation. The attack can be executed remotely. The attack requires a high level of complexity. The...

6.3CVSS0.00321EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/07/03 8:00 p.m.16 views

EUVD-2026-41565

A security vulnerability has been detected in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. This vulnerability affects unknown code of the file /index.php?action=viewstudent of the component POST Handler. The manipulation of the argument ID leads to authorization...

5.3CVSS5.6AI score0.00223EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/07/03 12:00 a.m.23 views

PT-2026-55582

Name of the Vulnerable Software and Affected Versions SourceCodester CET Automated Grading System with AI Predictive Analytics version 1.0 Description An authorization bypass exists in the POST Handler component. Remote exploitation is possible by manipulating the ID variable within the...

5.3CVSS6AI score0.00223EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2026/07/03 12:00 a.m.21 views

PT-2026-55586

Name of the Vulnerable Software and Affected Versions SourceCodester CET Automated Grading System with AI Predictive Analytics version 1.0 Description A remote manipulation issue exists in the processing logic that leads to session fixation, a condition where an attacker can hijack or predetermin...

6.3CVSS6.2AI score0.00321EPSS
SaveExploits0References8
NVD
NVD
added 2026/06/29 3:16 p.m.18 views

CVE-2026-13571

A flaw has been found in SourceCodester Simple Food Ordering System 1.0. The affected element is an unknown function of the file /cart.php. Executing a manipulation of the argument itemprice can lead to business logic errors. The attack may be performed from remote. The exploit has been published...

6.9CVSS0.00383EPSS
SaveExploits0References6
NVD
NVD
added 2026/06/29 2:16 p.m.23 views

CVE-2026-13568

A weakness has been identified in SourceCodester Inventory Management System 1.0. This vulnerability affects unknown code of the file /api/usershandler.php of the component User Registration Endpoint. This manipulation of the argument role causes improper access controls. Remote exploitation of t...

7.5CVSS0.00278EPSS
SaveExploits0References5
NVD
NVD
added 2026/06/29 2:16 p.m.22 views

CVE-2026-13565

A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0/1.php. Affected by this vulnerability is an unknown functionality of the file /editclass1.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be launched remotely. The...

7.5CVSS0.00263EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/06/29 1:30 p.m.50 views

CVE-2026-13571 SourceCodester Simple Food Ordering System cart.php logic error

A flaw has been found in SourceCodester Simple Food Ordering System 1.0. The affected element is an unknown function of the file /cart.php. Executing a manipulation of the argument itemprice can lead to business logic errors. The attack may be performed from remote. The exploit has been published...

6.9CVSS0.00383EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/06/29 1:15 p.m.17 views

EUVD-2026-40090

A vulnerability was detected in SourceCodester Inventory Management System 1.0. Impacted is an unknown function of the file /api/usershandler.php of the component User Registration Endpoint. Performing a manipulation of the argument fullname results in cross site scripting. The attack is possible...

5.1CVSS4.4AI score0.00191EPSS
SaveExploits0References5
CVE
CVE
added 2026/06/29 1:15 p.m.36 views

CVE-2026-13570

The CVE-2026-13570 entry concerns SourceCodester Inventory Management System 1.0 and affects the User Registration Endpoint, specifically the /api/users_handler.php function where manipulating the full_name parameter leads to cross-site scripting. The vulnerability is exploitable remotely, with p...

5.1CVSS4.4AI score0.00191EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/06/29 12:45 p.m.16 views

EUVD-2026-40088

A weakness has been identified in SourceCodester Inventory Management System 1.0. This vulnerability affects unknown code of the file /api/usershandler.php of the component User Registration Endpoint. This manipulation of the argument role causes improper access controls. Remote exploitation of t...

7.5CVSS6.8AI score0.00278EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/06/29 12:45 p.m.53 views

CVE-2026-13568 SourceCodester Inventory Management System User Registration Endpoint users_handler.php access control

A weakness has been identified in SourceCodester Inventory Management System 1.0. This vulnerability affects unknown code of the file /api/usershandler.php of the component User Registration Endpoint. This manipulation of the argument role causes improper access controls. Remote exploitation of t...

7.5CVSS0.00278EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/06/29 12:15 p.m.18 views

EUVD-2026-40077

A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected by this issue is some unknown functionality of the file /preview3.php. The manipulation of the argument courseyearsection leads to sql injection. The attack may be initiated remotely. The exploit is...

7.5CVSS7AI score0.00263EPSS
SaveExploits0References6
Rows per page
Query Builder