Lucene search
K

16073 matches found

Cvelist
Cvelist
added 2026/02/08 11:2 a.m.36 views

CVE-2026-2149 SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System appointments.php cross site scripting

A vulnerability was detected in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /appointments.php. The manipulation of the argument patientid results in cross site scripting. It is possible to...

5.3CVSS0.00352EPSS
Exploits1References4
EUVD
EUVD
added 2026/02/08 11:2 a.m.6 views

EUVD-2026-5800

A vulnerability was detected in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /appointments.php. The manipulation of the argument patientid results in cross site scripting. It is possible to...

6.1CVSS3.8AI score0.00352EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2026/02/08 11:2 a.m.3 views

CVE-2026-2149 SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System appointments.php cross site scripting

A vulnerability was detected in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /appointments.php. The manipulation of the argument patientid results in cross site scripting. It is possible to...

5.3CVSS3.8AI score0.00352EPSS
Exploits1References4
CNNVD
CNNVD
added 2026/02/08 12:0 a.m.4 views

SourceCodester Simple Responsive Tourism Website 代码注入漏洞

SourceCodester Simple Responsive Tourism Website is an open-source tourism website developed by SourceCodester. Version 1.0 of SourceCodester Simple Responsive Tourism Website has a code injection vulnerability. This vulnerability stems from incorrect handling of the parameter “Title” in the...

6.1CVSS5.7AI score0.00262EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2026/02/08 12:0 a.m.5 views

PT-2026-6990

Name of the Vulnerable Software and Affected Versions SourceCodester Simple Responsive Tourism Website version 1.0 Description A flaw exists in SourceCodester Simple Responsive Tourism Website version 1.0, specifically within an unknown function of the file /tourism/classes/Master.php?f=register...

5.3CVSS3.7AI score0.00352EPSS
Exploits1References7
CNNVD
CNNVD
added 2026/02/08 12:0 a.m.4 views

SourceCodester Patients Waiting Area Queue Management System 代码注入漏洞

The SourceCodester Patients Waiting Area Queue Management System is an open-source system developed by SourceCodester for managing patient waiting queues. Version 1.0 of the SourceCodester Patients Waiting Area Queue Management System contains a code injection vulnerability. This vulnerability...

6.1CVSS5.7AI score0.00352EPSS
Exploits1References5
CNNVD
CNNVD
added 2026/02/08 12:0 a.m.5 views

SourceCodester Patients Waiting Area Queue Management System 代码注入漏洞

The SourceCodester Patients Waiting Area Queue Management System is an open-source system developed by SourceCodester for managing patient waiting queues. Version 1.0 of the SourceCodester Patients Waiting Area Queue Management System contains a code injection vulnerability. This vulnerability...

6.1CVSS5.7AI score0.00352EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2026/02/08 12:0 a.m.9 views

PT-2026-6991

Name of the Vulnerable Software and Affected Versions SourceCodester Simple Responsive Tourism Website version 1.0 Description A flaw exists in SourceCodester Simple Responsive Tourism Website that allows for cross site scripting. This issue is triggered through manipulation of the Title argument...

5.3CVSS4AI score0.00262EPSS
Exploits1References7
RedhatCVE
RedhatCVE
added 2026/02/07 7:30 p.m.7 views

CVE-2026-2059

A vulnerability has been found in SourceCodester Medical Center Portal Management System 1.0. Affected is an unknown function of the file /empedit1.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to the publ...

9.8CVSS7AI score0.00416EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/02/07 7:30 p.m.5 views

CVE-2026-2057

A vulnerability was detected in SourceCodester Medical Center Portal Management System 1.0. This affects an unknown function of the file /login.php. The manipulation of the argument User results in sql injection. The attack can be executed remotely. The exploit is now public and may be used...

9.8CVSS7.2AI score0.00326EPSS
Exploits1References1
NVD
NVD
added 2026/02/07 4:15 p.m.8 views

CVE-2026-2090

A vulnerability was determined in SourceCodester Online Class Record System 1.0. This issue affects some unknown processing of the file /admin/message/search.php. Executing a manipulation of the argument term can lead to sql injection. The attack can be executed remotely. The exploit has been...

9.8CVSS0.00312EPSS
Exploits0References5
EUVD
EUVD
added 2026/02/07 3:32 p.m.9 views

EUVD-2026-5723

A vulnerability was determined in SourceCodester Online Class Record System 1.0. This issue affects some unknown processing of the file /admin/message/search.php. Executing a manipulation of the argument term can lead to sql injection. The attack can be executed remotely. The exploit has been...

7.5CVSS5.4AI score0.00312EPSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2026/02/07 3:32 p.m.3 views

CVE-2026-2090

A vulnerability was determined in SourceCodester Online Class Record System 1.0. This issue affects some unknown processing of the file /admin/message/search.php. Executing a manipulation of the argument term can lead to sql injection. The attack can be executed remotely. The exploit has been...

7.5CVSS7.2AI score0.00312EPSS
Exploits0References5Affected Software1
CVE
CVE
added 2026/02/07 3:32 p.m.15 views

CVE-2026-2090

CVE-2026-2090 affects the SourceCodester Online Class Record System 1.0. The vulnerability resides in the /admin/message/search.php handler, where manipulating the term parameter can lead to a SQL injection. Exploitation is possible remotely and public disclosures exist. Several sources corrobora...

9.8CVSS7.2AI score0.00312EPSS
Exploits0References5Affected Software1
NVD
NVD
added 2026/02/07 3:15 p.m.12 views

CVE-2026-2089

A vulnerability was found in SourceCodester Online Class Record System 1.0. This vulnerability affects unknown code of the file /admin/subject/controller.php. Performing a manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit has been...

9.8CVSS0.00312EPSS
Exploits0References5
OSV
OSV
added 2026/02/07 3:15 p.m.2 views

CVE-2026-2089

A vulnerability was found in SourceCodester Online Class Record System 1.0. This vulnerability affects unknown code of the file /admin/subject/controller.php. Performing a manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit has been...

9.8CVSS5.7AI score0.00312EPSS
Exploits0References5
Cvelist
Cvelist
added 2026/02/07 3:2 p.m.35 views

CVE-2026-2089 SourceCodester Online Class Record System controller.php sql injection

A vulnerability was found in SourceCodester Online Class Record System 1.0. This vulnerability affects unknown code of the file /admin/subject/controller.php. Performing a manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit has been...

7.5CVSS0.00312EPSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2026/02/07 3:2 p.m.5 views

CVE-2026-2089

A vulnerability was found in SourceCodester Online Class Record System 1.0. This vulnerability affects unknown code of the file /admin/subject/controller.php. Performing a manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit has been...

7.5CVSS7.2AI score0.00312EPSS
Exploits0References5Affected Software1
NVD
NVD
added 2026/02/07 2:16 p.m.7 views

CVE-2026-2087

A flaw has been found in SourceCodester Online Class Record System 1.0. Affected by this issue is some unknown functionality of the file /admin/login.php. This manipulation of the argument useremail causes sql injection. The attack may be initiated remotely. The exploit has been published and may...

9.8CVSS0.00312EPSS
Exploits0References5
OSV
OSV
added 2026/02/07 2:16 p.m.2 views

CVE-2026-2087

A flaw has been found in SourceCodester Online Class Record System 1.0. Affected by this issue is some unknown functionality of the file /admin/login.php. This manipulation of the argument useremail causes sql injection. The attack may be initiated remotely. The exploit has been published and may...

9.8CVSS5.7AI score0.00312EPSS
Exploits0References5
Rows per page
Query Builder