Lucene search
+L

20077 matches found

Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•33 views

PT-2026-86633

A flaw has been found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This issue affects some unknown processing of the file db.php. Executing a manipulation can lead to hard-coded credentials. The attack can be executed remotely. The exploit has been published an...

7.5CVSS6.8AI score0.00495EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•22 views

PT-2026-86636

A vulnerability has been found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. Impacted is an unknown function of the file delete exam.php. The manipulation of the argument ID leads to authorization bypass. The attack is possible to be carried out remotely. The...

7.5CVSS6.9AI score0.0052EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•19 views

PT-2026-86638

A vulnerability was determined in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. The impacted element is an unknown function of the file auth process.php of the component Login. This manipulation causes session fixiation. It is possible to initiate the attack...

7.5CVSS6.2AI score0.00396EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•20 views

PT-2026-86681

A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. Impacted is an unknown function of the file /delete subject.php. Performing a manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The exploit has been...

7.5CVSS7.1AI score0.00431EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/07 12:00 a.m.•10 views

CVE-2026-86278: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. The affected element is an unknown function of the file managesubjects.php. The manipulation of the argument msg/title/content results in cross site scripting. The attack may be performed fr...

5.3CVSS3.7AI score0.0047EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•20 views

PT-2026-86632

A vulnerability was detected in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This vulnerability affects the function register of the file auth.php. Performing a manipulation of the argument role results in improper privilege management. Remote exploitation of the...

6.9CVSS5.7AI score0.00484EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•24 views

PT-2026-86667

A vulnerability was detected in SourceCodester Simple Traffic Offense System 1.0. Affected is an unknown function of the file saveuser.php of the component User Creation. Performing a manipulation of the argument position results in missing authentication. The attack may be initiated remotely. Th...

7.5CVSS7AI score0.00686EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•31 views

PT-2026-86647

A security flaw has been discovered in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This impacts an unknown function. Performing a manipulation results in cross-site request forgery. The attack can be initiated remotely. The exploit has been released to the public...

5.3CVSS5AI score0.0023EPSS
SaveExploits0References7
NVD
NVD
•added 2026/09/06 10:17 p.m.•16 views

CVE-2026-86225

A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is the function mysqliquery of the file /admin/modaladdroom.php. The manipulation of the argument roomname leads to sql injection. The attack is possible to be carried out...

7.5CVSS0.00431EPSS
SaveExploits0References6
NVD
NVD
•added 2026/09/06 9:17 p.m.•21 views

CVE-2026-86224

A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. Affected is the function mysqliquery of the file /admin/modaladdproduct.php. Executing a manipulation of the argument fname can lead to sql injection. The attack can be executed remotely. The exploit has been...

7.5CVSS0.00431EPSS
SaveExploits0References6
CVE
CVE
•added 2026/09/06 9:15 p.m.•32 views

CVE-2026-86225

SourceCodester Class and Exam Timetabling System 1.0 contains a remote SQL injection in the mysqli_query function within /admin/modal_add_room.php, triggered by the unsanitized room_name argument. No authentication or user interaction is required. Impact on confidentiality, integrity, and availab...

7.5CVSS7.1AI score0.00431EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/09/06 9:00 p.m.•12 views

CVE-2026-86224 SourceCodester Class and Exam Timetabling System modal_add_product.php mysqli_query sql injection

A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. Affected is the function mysqliquery of the file /admin/modaladdproduct.php. Executing a manipulation of the argument fname can lead to sql injection. The attack can be executed remotely. The exploit has been...

7.5CVSS7AI score0.00431EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/09/06 9:00 p.m.•49 views

CVE-2026-86224 SourceCodester Class and Exam Timetabling System modal_add_product.php mysqli_query sql injection

A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. Affected is the function mysqliquery of the file /admin/modaladdproduct.php. Executing a manipulation of the argument fname can lead to sql injection. The attack can be executed remotely. The exploit has been...

7.5CVSS0.00431EPSS
SaveExploits0References6
CVE
CVE
•added 2026/09/06 9:00 p.m.•41 views

CVE-2026-86224

A SQL injection vulnerability in SourceCodester Class and Exam Timetabling System 1.0 affects the mysqli_query function in /admin/modal_add_product.php , where manipulation of the fname argument allows a remote, unauthenticated attacker to inject SQL. The impact is rated HIGH (7.3) under CVSS 3.1...

7.5CVSS7AI score0.00431EPSS
SaveExploits0References6
NVD
NVD
•added 2026/09/06 8:17 p.m.•16 views

CVE-2026-86222

A vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0. This affects the function mysqliquery of the file /admin/modaladdcourse2.php. Such manipulation of the argument course leads to sql injection. The attack may be launched remotely. The exploit has been disclose...

7.5CVSS0.00431EPSS
SaveExploits0References6
NVD
NVD
•added 2026/09/06 8:17 p.m.•15 views

CVE-2026-86223

A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. This impacts the function mysqliquery of the file /admin/modaladdcoursea.php. Performing a manipulation of the argument course results in sql injection. Remote exploitation of the attack is possible. The exploit ha...

7.5CVSS0.00435EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2026/09/06 7:45 p.m.•52 views

CVE-2026-86223 SourceCodester Class and Exam Timetabling System modal_add_coursea.php mysqli_query sql injection

A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. This impacts the function mysqliquery of the file /admin/modaladdcoursea.php. Performing a manipulation of the argument course results in sql injection. Remote exploitation of the attack is possible. The exploit ha...

7.5CVSS0.00435EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/09/06 7:45 p.m.•15 views

CVE-2026-86223 SourceCodester Class and Exam Timetabling System modal_add_coursea.php mysqli_query sql injection

A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. This impacts the function mysqliquery of the file /admin/modaladdcoursea.php. Performing a manipulation of the argument course results in sql injection. Remote exploitation of the attack is possible. The exploit ha...

7.5CVSS6.9AI score0.00435EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/09/06 7:45 p.m.•16 views

EUVD-2026-72172

A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. This impacts the function mysqliquery of the file /admin/modaladdcoursea.php. Performing a manipulation of the argument course results in sql injection. Remote exploitation of the attack is possible. The exploit ha...

7.5CVSS7AI score0.00435EPSS
SaveExploits0References6
CVE
CVE
•added 2026/09/06 7:45 p.m.•31 views

CVE-2026-86223

A SQL injection vulnerability exists in SourceCodester Class and Exam Timetabling System 1.0 , specifically in the mysqli_query function within the file /admin/modal_add_coursea.php . Manipulating the course argument allows remote exploitation without authentication. The exploit has been made pub...

7.5CVSS6.9AI score0.00435EPSS
SaveExploits0References7
Rows per page
Query Builder