Lucene search
+L

20085 matches found

Cvelist
Cvelist
•added 2026/08/17 7:45 p.m.•56 views

CVE-2026-75014 SourceCodester Pet Grooming Management Software get_barcode_data.php sql injection

A flaw has been found in SourceCodester Pet Grooming Management Software 1.0. This vulnerability affects unknown code of the file /admin/getbarcodedata.php. This manipulation of the argument barcode causes sql injection. The attack may be initiated remotely. The exploit has been published and may...

7.5CVSS0.00431EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/08/17 7:45 p.m.•19 views

CVE-2026-75014 SourceCodester Pet Grooming Management Software get_barcode_data.php sql injection

A flaw has been found in SourceCodester Pet Grooming Management Software 1.0. This vulnerability affects unknown code of the file /admin/getbarcodedata.php. This manipulation of the argument barcode causes sql injection. The attack may be initiated remotely. The exploit has been published and may...

7.5CVSS7AI score0.00431EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/08/17 5:15 a.m.•49 views

CVE-2026-19987 SourceCodester Best Employee Management System Profile exposure of information through directory listing

A security vulnerability has been detected in SourceCodester Best Employee Management System 1.0. This affects an unknown function of the file /assets/uploadImage/Profile/. Such manipulation leads to exposure of information through directory listing. It is possible to launch the attack remotely...

6.9CVSS0.0051EPSS
SaveExploits0References5
CVE
CVE
•added 2026/08/17 5:15 a.m.•55 views

CVE-2026-19987

SourceCodester Best Employee Management System 1.0 contains a vulnerability in the /assets/uploadImage/Profile/ function that allows information exposure via directory listing. Exploitation is described as remotely possible. The available documents identify the affected software and the exposed r...

6.9CVSS5.6AI score0.0051EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/17 12:00 a.m.•8 views

CVE-2026-19987: Exposure of Information Through Directory Listing

A security vulnerability has been detected in SourceCodester Best Employee Management System 1.0. This affects an unknown function of the file /assets/uploadImage/Profile/. Such manipulation leads to exposure of information through directory listing. It is possible to launch the attack remotely...

6.9CVSS5.6AI score0.0051EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/17 12:00 a.m.•8 views

CVE-2026-75014: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in SourceCodester Pet Grooming Management Software 1.0. This vulnerability affects unknown code of the file /admin/getbarcodedata.php. This manipulation of the argument barcode causes sql injection. The attack may be initiated remotely. The exploit has been published and may...

7.5CVSS7AI score0.00431EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/17 12:00 a.m.•25 views

PT-2026-73205

A security vulnerability has been detected in SourceCodester Best Employee Management System 1.0. This affects an unknown function of the file /assets/uploadImage/Profile/. Such manipulation leads to exposure of information through directory listing. It is possible to launch the attack remotely...

6.9CVSS5.5AI score0.0051EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/17 12:00 a.m.•8 views

CVE-2026-75078: Improper Neutralization of Input During Web Page Generation

A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. This affects an unknown part of the file /BSHRM1.php. Performing a manipulation of the argument course results in cross site scripting. Remote exploitation of the attack is possible. The exploit has been...

5.3CVSS3.9AI score0.0047EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/17 12:00 a.m.•27 views

PT-2026-76766

Name of the Vulnerable Software and Affected Versions SourceCodester Pet Grooming Management Software version 1.0 Description A flaw in the /admin/get barcode data.php endpoint allows for remote SQL injection. This occurs through the manipulation of the barcode variable, which can be exploited to...

7.5CVSS7.4AI score0.00431EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
•added 2026/08/17 12:00 a.m.•21 views

PT-2026-76881

Name of the Vulnerable Software and Affected Versions SourceCodester Class and Exam Timetabling System version 1.0 Description A security flaw allows remote exploitation via cross site scripting XSS, a technique where malicious scripts are injected into trusted websites. The issue exists in the...

5.3CVSS4.6AI score0.0047EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/17 12:00 a.m.•9 views

CVE-2026-75077: Improper Neutralization of Input During Web Page Generation

A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected by this issue is some unknown functionality of the file /BSCE2.php. Such manipulation of the argument course leads to cross site scripting. The attack may be launched remotely. The exploit is publicly...

5.3CVSS3.8AI score0.0047EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/08/16 1:30 a.m.•60 views

CVE-2026-19925 SourceCodester Stock Management System Master.php delete_supplier sql injection

A vulnerability was detected in SourceCodester Stock Management System 1.0. This issue affects some unknown processing of the file /classes/Master.php?f=deletesupplier. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit is now public and...

5.8CVSS0.00349EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/08/16 1:30 a.m.•20 views

EUVD-2026-59838

A vulnerability was detected in SourceCodester Stock Management System 1.0. This issue affects some unknown processing of the file /classes/Master.php?f=deletesupplier. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit is now public and...

5.8CVSS5.2AI score0.00349EPSS
SaveExploits0References6
attackerkb
attackerkb
•added 2026/08/16 1:30 a.m.•46 views

CVE-2026-19925

A vulnerability was detected in SourceCodester Stock Management System 1.0. This issue affects some unknown processing of the file /classes/Master.php?f=deletesupplier. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit is now public and...

5.8CVSS5.2AI score0.00349EPSS
SaveExploits0References6Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/16 12:00 a.m.•10 views

CVE-2026-19925: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in SourceCodester Stock Management System 1.0. This issue affects some unknown processing of the file /classes/Master.php?f=deletesupplier. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit is now public and...

5.8CVSS5.5AI score0.00349EPSS
SaveExploits0References3
NVD
NVD
•added 2026/08/15 6:16 p.m.•21 views

CVE-2026-19903

A vulnerability has been found in SourceCodester Online Clothing Store 1.0. This affects an unknown part of the file /db/shopping.sql of the component SQL Database Backup. The manipulation leads to files or directories accessible. Remote exploitation of the attack is possible. The exploit has bee...

6.9CVSS0.00532EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/08/15 6:00 p.m.•25 views

EUVD-2026-59783

A vulnerability was found in SourceCodester Online Book Store System 1.0. This vulnerability affects unknown code of the file /admin/index.php?page=sitesettings of the component System Settings Module. The manipulation results in cross site scripting. The attack can be executed remotely. The...

4.8CVSS3.3AI score0.00368EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/08/15 6:00 p.m.•64 views

CVE-2026-19904 SourceCodester Online Book Store System System Settings index.php site_settings cross site scripting

A vulnerability was found in SourceCodester Online Book Store System 1.0. This vulnerability affects unknown code of the file /admin/index.php?page=sitesettings of the component System Settings Module. The manipulation results in cross site scripting. The attack can be executed remotely. The...

4.8CVSS0.00368EPSS
SaveExploits0References6
CVE
CVE
•added 2026/08/15 6:00 p.m.•42 views

CVE-2026-19904

CVE-2026-19904 affects SourceCodester Online Book Store System 1.0 in the System Settings Module, via /admin/index.php?page=site_settings. The vulnerability enables cross-site scripting and can be exploited remotely, with a public exploit reported. Documents confirm the affected path and XSS impa...

4.8CVSS3.7AI score0.00368EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/08/15 5:45 p.m.•16 views

CVE-2026-19903 SourceCodester Online Clothing Store SQL Database Backup shopping.sql file access

A vulnerability has been found in SourceCodester Online Clothing Store 1.0. This affects an unknown part of the file /db/shopping.sql of the component SQL Database Backup. The manipulation leads to files or directories accessible. Remote exploitation of the attack is possible. The exploit has bee...

6.9CVSS5.5AI score0.00532EPSS
SaveExploits0References6
Rows per page
Query Builder