Lucene search
+L

20085 matches found

Vulnrichment
Vulnrichment
•added 2026/08/19 3:30 a.m.•13 views

CVE-2026-76050 SourceCodester Simple Online Food Ordering System ajax.php delete_menu sql injection

A vulnerability was found in SourceCodester Simple Online Food Ordering System 1.0. This impacts an unknown function of the file /admin/ajax.php?action=deletemenu. The manipulation of the argument ID results in sql injection. It is possible to launch the attack remotely. The exploit has been made...

7.5CVSS6.9AI score0.00431EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/08/19 3:30 a.m.•57 views

CVE-2026-76050 SourceCodester Simple Online Food Ordering System ajax.php delete_menu sql injection

A vulnerability was found in SourceCodester Simple Online Food Ordering System 1.0. This impacts an unknown function of the file /admin/ajax.php?action=deletemenu. The manipulation of the argument ID results in sql injection. It is possible to launch the attack remotely. The exploit has been made...

7.5CVSS0.00431EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/08/19 3:15 a.m.•52 views

CVE-2026-76049 SourceCodester Simple Online Food Ordering System ajax.php save_menu sql injection

A vulnerability has been found in SourceCodester Simple Online Food Ordering System 1.0. This affects an unknown function of the file /admin/ajax.php?action=savemenu. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

7.5CVSS0.00431EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/08/19 3:15 a.m.•26 views

EUVD-2026-62227

A vulnerability has been found in SourceCodester Simple Online Food Ordering System 1.0. This affects an unknown function of the file /admin/ajax.php?action=savemenu. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

7.5CVSS7.3AI score0.00431EPSS
SaveExploits0References6
CVE
CVE
•added 2026/08/19 3:15 a.m.•43 views

CVE-2026-76049

CVE-2026-76049 is a SQL injection in SourceCodester Simple Online Food Ordering System 1.0, triggered via the ID argument in /admin/ajax.php?action=save_menu, exploitable remotely with no authentication; CVSS 7.3 HIGH, exploit code maturity PoC, but no specific in-the-wild exploitation evidence i...

7.5CVSS6.9AI score0.00431EPSS
SaveExploits0References6
CVE
CVE
•added 2026/08/19 3:00 a.m.•47 views

CVE-2026-76048

SourceCodester Simple Online Food Ordering System 1.0 contains a SQL injection vulnerability in the Username parameter of /admin/ajax.php?action=login. A remote, unauthenticated attacker can exploit this to compromise confidentiality, integrity, and availability of the application. A proof-of-con...

7.5CVSS6.9AI score0.00431EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/08/19 3:00 a.m.•56 views

CVE-2026-76048 SourceCodester Simple Online Food Ordering System ajax.php login sql injection

A flaw has been found in SourceCodester Simple Online Food Ordering System 1.0. The impacted element is an unknown function of the file /admin/ajax.php?action=login. Executing a manipulation of the argument Username can lead to sql injection. The attack may be performed from remote. The exploit h...

7.5CVSS0.00431EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/08/19 12:00 a.m.•31 views

PT-2026-78265

Name of the Vulnerable Software and Affected Versions SourceCodester Simple Online Food Ordering System version 1.0 Description Remote SQL injection is possible through the manipulation of the ID argument in the '/admin/ajax.php?action=save menu' endpoint. SQL injection is a technique where an...

7.5CVSS7.2AI score0.00431EPSS
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/19 12:00 a.m.•10 views

CVE-2026-76049: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in SourceCodester Simple Online Food Ordering System 1.0. This affects an unknown function of the file /admin/ajax.php?action=savemenu. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

7.5CVSS6.9AI score0.00431EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/19 12:00 a.m.•12 views

CVE-2026-76050: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Simple Online Food Ordering System 1.0. This impacts an unknown function of the file /admin/ajax.php?action=deletemenu. The manipulation of the argument ID results in sql injection. It is possible to launch the attack remotely. The exploit has been made...

7.5CVSS7AI score0.00431EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/19 12:00 a.m.•9 views

CVE-2026-76048: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in SourceCodester Simple Online Food Ordering System 1.0. The impacted element is an unknown function of the file /admin/ajax.php?action=login. Executing a manipulation of the argument Username can lead to sql injection. The attack may be performed from remote. The exploit h...

7.5CVSS7AI score0.00431EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/19 12:00 a.m.•29 views

PT-2026-78266

Name of the Vulnerable Software and Affected Versions SourceCodester Simple Online Food Ordering System version 1.0 Description Remote SQL injection is possible via the /admin/ajax.php?action=delete menu endpoint. The issue occurs when the ID argument is manipulated, allowing an attacker to execu...

7.5CVSS7.7AI score0.00431EPSS
SaveExploits0References10
NVD
NVD
•added 2026/08/18 3:16 a.m.•22 views

CVE-2026-75151

A vulnerability has been found in SourceCodester Onlne Examination & Learning Management System 1.0. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross-site request forgery. The attack can be initiated remotely...

5.3CVSS0.00225EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/08/18 2:15 a.m.•26 views

EUVD-2026-60567

A vulnerability has been found in SourceCodester Onlne Examination & Learning Management System 1.0. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross-site request forgery. The attack can be initiated remotely...

5.3CVSS4.6AI score0.00225EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/08/18 2:15 a.m.•19 views

CVE-2026-75151 SourceCodester Onlne Examination & Learning Management System cross-site request forgery

A vulnerability has been found in SourceCodester Onlne Examination & Learning Management System 1.0. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross-site request forgery. The attack can be initiated remotely...

5.3CVSS5.1AI score0.00225EPSS
SaveExploits0References5
CVE
CVE
•added 2026/08/18 2:15 a.m.•45 views

CVE-2026-75151

SourceCodester Online Examination & Learning Management System 1.0 has a CSRF vulnerability in an unspecified function. No patch version or workaround is provided. No in-the-wild exploitation details are available. CVSS 3.1 base score 4.3 (MEDIUM), network vector, user interaction required. No af...

5.3CVSS5.1AI score0.00225EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/08/18 2:15 a.m.•52 views

CVE-2026-75151 SourceCodester Onlne Examination & Learning Management System cross-site request forgery

A vulnerability has been found in SourceCodester Onlne Examination & Learning Management System 1.0. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross-site request forgery. The attack can be initiated remotely...

5.3CVSS0.00225EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2026/08/18 2:15 a.m.•60 views

CVE-2026-75151

A vulnerability has been found in SourceCodester Onlne Examination & Learning Management System 1.0. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross-site request forgery. The attack can be initiated remotely...

5.3CVSS5AI score0.00225EPSS
SaveExploits0References6Affected Software1
EUVD
EUVD
•added 2026/08/18 12:30 a.m.•23 views

EUVD-2026-60556

A weakness has been identified in SourceCodester Class and Exam Timetabling System 1.0. This vulnerability affects unknown code of the file /editsubject2.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been made...

7.5CVSS5.6AI score0.00431EPSS
SaveExploits0References7
EUVD
EUVD
•added 2026/08/18 12:30 a.m.•26 views

EUVD-2026-60555

A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. This affects an unknown part of the file /BSHRM1.php. Performing a manipulation of the argument course results in cross site scripting. Remote exploitation of the attack is possible. The exploit has been...

5.3CVSS4.1AI score0.0047EPSS
SaveExploits0References7
Rows per page
Query Builder