Lucene search
K

16073 matches found

NVD
NVD
added 2026/03/08 5:16 p.m.5 views

CVE-2026-3751

A vulnerability was detected in SourceCodester Employee Task Management System 1.0. Impacted is an unknown function of the file /daily-attendance-report.php of the component GET Parameter Handler. The manipulation of the argument Date results in sql injection. The attack may be performed from...

7.2CVSS0.00313EPSS
Exploits1References5
NVD
NVD
added 2026/03/08 5:16 p.m.5 views

CVE-2026-3752

A flaw has been found in SourceCodester Employee Task Management System up to 1.0. The affected element is an unknown function of the file /daily-task-report.php of the component GET Parameter Handler. This manipulation of the argument Date causes sql injection. It is possible to initiate the...

7.2CVSS0.00313EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2026/03/08 5:2 p.m.2 views

CVE-2026-3753 SourceCodester Sales and Inventory System add_sales_print.php sql injection

A vulnerability has been found in SourceCodester Sales and Inventory System up to 1.0. The impacted element is an unknown function of the file /addsalesprint.php. Such manipulation of the argument sid leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

6.5CVSS5.7AI score0.00301EPSS
Exploits1References5
Cvelist
Cvelist
added 2026/03/08 5:2 p.m.33 views

CVE-2026-3753 SourceCodester Sales and Inventory System add_sales_print.php sql injection

A vulnerability has been found in SourceCodester Sales and Inventory System up to 1.0. The impacted element is an unknown function of the file /addsalesprint.php. Such manipulation of the argument sid leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

6.5CVSS0.00301EPSS
Exploits1References5
CVE
CVE
added 2026/03/08 5:2 p.m.10 views

CVE-2026-3753

CVE-2026-3753 affects SourceCodester Sales and Inventory System up to version 1.0. The vulnerability is an SQL injection in the add_sales_print.php file triggered by manipulation of the sid parameter. It enables remote exploitation and has publicly disclosed exploits. Several connected sources co...

8.8CVSS6.5AI score0.00301EPSS
Exploits1References5Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/03/08 5:2 p.m.1 views

CVE-2026-3753

A vulnerability has been found in SourceCodester Sales and Inventory System up to 1.0. The impacted element is an unknown function of the file /addsalesprint.php. Such manipulation of the argument sid leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

6.5CVSS5.7AI score0.00301EPSS
Exploits1References5Affected Software1
CVE
CVE
added 2026/03/08 5:2 p.m.12 views

CVE-2026-3752

CVE-2026-3752 affects SourceCodester’s Employee Task Management System v1.0, specifically the GET Parameter Handler in /daily-task-report.php where manipulating the Date argument triggers an SQL injection. The flaw can be exploited remotely and has been demonstrated publicly. Multiple sources (NV...

7.2CVSS5.7AI score0.00313EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2026/03/08 5:2 p.m.28 views

CVE-2026-3752 SourceCodester Employee Task Management System GET Parameter daily-task-report.php sql injection

A flaw has been found in SourceCodester Employee Task Management System up to 1.0. The affected element is an unknown function of the file /daily-task-report.php of the component GET Parameter Handler. This manipulation of the argument Date causes sql injection. It is possible to initiate the...

5.8CVSS0.00313EPSS
Exploits1References5
ATTACKERKB
ATTACKERKB
added 2026/03/08 4:32 p.m.5 views

CVE-2026-3751

A vulnerability was detected in SourceCodester Employee Task Management System 1.0. Impacted is an unknown function of the file /daily-attendance-report.php of the component GET Parameter Handler. The manipulation of the argument Date results in sql injection. The attack may be performed from...

5.8CVSS5.7AI score0.00313EPSS
Exploits1References5Affected Software1
CVE
CVE
added 2026/03/08 4:32 p.m.14 views

CVE-2026-3751

The CVE-2026-3751 affects SourceCodester Employee Task Management System 1.0. A SQL injection exists in the GET Parameter Handler for the /daily-attendance-report.php file, triggered by manipulating the Date parameter. The vulnerability is exploitable remotely and exploits are publicly available....

7.2CVSS5.7AI score0.00313EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2026/03/08 4:32 p.m.29 views

CVE-2026-3751 SourceCodester Employee Task Management System GET Parameter daily-attendance-report.php sql injection

A vulnerability was detected in SourceCodester Employee Task Management System 1.0. Impacted is an unknown function of the file /daily-attendance-report.php of the component GET Parameter Handler. The manipulation of the argument Date results in sql injection. The attack may be performed from...

5.8CVSS0.00313EPSS
Exploits1References5
NVD
NVD
added 2026/03/08 4:16 p.m.6 views

CVE-2026-3746

A vulnerability was determined in SourceCodester Simple Responsive Tourism Website 1.0. Affected by this vulnerability is an unknown functionality of the file /tourism/classes/Login.php?f=login of the component Login. This manipulation of the argument Username causes sql injection. The attack may...

9.8CVSS0.00379EPSS
Exploits1References6
OSV
OSV
added 2026/03/08 4:16 p.m.8 views

CVE-2026-3746

A vulnerability was determined in SourceCodester Simple Responsive Tourism Website 1.0. Affected by this vulnerability is an unknown functionality of the file /tourism/classes/Login.php?f=login of the component Login. This manipulation of the argument Username causes sql injection. The attack may...

9.8CVSS5.7AI score0.00379EPSS
Exploits1References6
CVE
CVE
added 2026/03/08 3:32 p.m.14 views

CVE-2026-3746

Consolidated details across multiple sources identify CVE-2026-3746 as a SQL injection in SourceCodester Simple Responsive Tourism Website 1.0, affecting the Login component’s file /tourism/classes/Login.php?f=login. The bug arises from manipulating the Username argument, enabling remote exploita...

9.8CVSS6.9AI score0.00379EPSS
Exploits1References6Affected Software1
Cvelist
Cvelist
added 2026/03/08 3:32 p.m.36 views

CVE-2026-3746 SourceCodester Simple Responsive Tourism Website Login Login.php sql injection

A vulnerability was determined in SourceCodester Simple Responsive Tourism Website 1.0. Affected by this vulnerability is an unknown functionality of the file /tourism/classes/Login.php?f=login of the component Login. This manipulation of the argument Username causes sql injection. The attack may...

7.5CVSS0.00379EPSS
Exploits1References6
Vulnrichment
Vulnrichment
added 2026/03/08 3:32 p.m.3 views

CVE-2026-3746 SourceCodester Simple Responsive Tourism Website Login Login.php sql injection

A vulnerability was determined in SourceCodester Simple Responsive Tourism Website 1.0. Affected by this vulnerability is an unknown functionality of the file /tourism/classes/Login.php?f=login of the component Login. This manipulation of the argument Username causes sql injection. The attack may...

7.5CVSS5.7AI score0.00379EPSS
Exploits1References6
EUVD
EUVD
added 2026/03/08 3:30 p.m.3 views

EUVD-2026-10241

A vulnerability was identified in SourceCodester Pet Grooming Management Software 1.0. This vulnerability affects unknown code of the component Financial Report Page. The manipulation leads to improper authorization. Remote exploitation of the attack is possible. The exploit is publicly available...

6.5CVSS6.3AI score0.00254EPSS
Exploits1References6
EUVD
EUVD
added 2026/03/08 3:30 p.m.3 views

EUVD-2026-10240

A vulnerability was determined in SourceCodester Pet Grooming Management Software 1.0. This affects an unknown part of the file adduser.php of the component User Creation Handler. Executing a manipulation can lead to improper authorization. The attack may be launched remotely. The exploit has bee...

6.5CVSS6.3AI score0.00254EPSS
Exploits1References6
EUVD
EUVD
added 2026/03/08 3:30 p.m.3 views

EUVD-2026-10237

A flaw has been found in SourceCodester Client Database Management System 1.0. Affected is an unknown function of the file /fetchmanagerdetails.php of the component Endpoint. This manipulation of the argument managerid causes improper authorization. The attack can be initiated remotely. The explo...

7.5CVSS6.8AI score0.00364EPSS
Exploits1References6
OSV
OSV
added 2026/03/08 2:15 p.m.3 views

CVE-2026-3738

A vulnerability was identified in SourceCodester Pet Grooming Management Software 1.0. This vulnerability affects unknown code of the component Financial Report Page. The manipulation leads to improper authorization. Remote exploitation of the attack is possible. The exploit is publicly available...

6.3CVSS5.4AI score0.00254EPSS
Exploits1References5
Rows per page
Query Builder