Lucene search
+L

20165 matches found

attackerkb
attackerkb
•added 2026/03/09 12:32 a.m.•11 views

CVE-2026-3791

A vulnerability has been found in SourceCodester Sales and Inventory System 1.0. Affected by this issue is some unknown functionality of the file dashboard.php of the component Search. The manipulation of the argument searchtxt leads to sql injection. The attack is possible to be carried out...

6.5CVSS6.4AI score0.00313EPSS
SaveExploits1References5Affected Software1
CVE
CVE
•added 2026/03/09 12:32 a.m.•56 views

CVE-2026-3791

CVE-2026-3791 affects SourceCodester Sales and Inventory System 1.0, specifically the file dashboard.php in the Search component. The issue arises from manipulating the argument searchtxt , causing a SQL Injection . The vulnerability can be exploited remotely, and the exploit has been disclosed p...

8.8CVSS6.3AI score0.00313EPSS
SaveExploits1References5Affected Software1
EUVD
EUVD
•added 2026/03/09 12:30 a.m.•24 views

EUVD-2026-10274

A vulnerability has been found in SourceCodester/janobe Resort Reservation System 1.0. This vulnerability affects unknown code of the file /accomodation.php. Such manipulation of the argument q leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to the...

8.8CVSS6.4AI score0.00343EPSS
SaveExploits1References5
EUVD
EUVD
•added 2026/03/09 12:30 a.m.•17 views

EUVD-2026-10280

A flaw has been found in SourceCodester Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file checksupplierdetails.php of the component POST Parameter Handler. Executing a manipulation of the argument stockname1 can lead to sql injection. The attac...

8.8CVSS6.4AI score0.00313EPSS
SaveExploits1References6
NVD
NVD
•added 2026/03/09 12:16 a.m.•18 views

CVE-2026-3790

A flaw has been found in SourceCodester Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file checksupplierdetails.php of the component POST Parameter Handler. Executing a manipulation of the argument stockname1 can lead to sql injection. The attac...

8.8CVSS0.00313EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2026/03/09 12:02 a.m.•55 views

CVE-2026-3790 SourceCodester Sales and Inventory System POST Parameter check_supplier_details.php sql injection

A flaw has been found in SourceCodester Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file checksupplierdetails.php of the component POST Parameter Handler. Executing a manipulation of the argument stockname1 can lead to sql injection. The attac...

6.5CVSS0.00313EPSS
SaveExploits1References5
attackerkb
attackerkb
•added 2026/03/09 12:02 a.m.•9 views

CVE-2026-3790

A flaw has been found in SourceCodester Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file checksupplierdetails.php of the component POST Parameter Handler. Executing a manipulation of the argument stockname1 can lead to sql injection. The attac...

6.5CVSS6.4AI score0.00313EPSS
SaveExploits1References5Affected Software1
CVE
CVE
•added 2026/03/09 12:02 a.m.•55 views

CVE-2026-3790

SourceCodester Sales and Inventory System 1.0 contains a SQL injection vulnerability in the POST handler, specifically in check_supplier_details.php where modifying the stock_name1 argument enables remote exploitation. The flaw arises from unsafely handling input, allowing an attacker to manipula...

8.8CVSS6.4AI score0.00313EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2026/03/09 12:02 a.m.•10 views

CVE-2026-3790 SourceCodester Sales and Inventory System POST Parameter check_supplier_details.php sql injection

A flaw has been found in SourceCodester Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file checksupplierdetails.php of the component POST Parameter Handler. Executing a manipulation of the argument stockname1 can lead to sql injection. The attac...

6.5CVSS6.4AI score0.00313EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2026/03/09 12:00 a.m.•28 views

PT-2026-23998

Name of the Vulnerable Software and Affected Versions SourceCodester Sales and Inventory System version 1.0 Description A flaw exists in SourceCodester Sales and Inventory System 1.0 related to the handling of a GET parameter. Specifically, manipulation of the sellid argument within the sales...

8.8CVSS6.4AI score0.00383EPSS
SaveExploits1References11
CNNVD
CNNVD
•added 2026/03/09 12:00 a.m.•22 views

SourceCodester Sales and Inventory System SQL Injection Vulnerability

The SourceCodester Sales and Inventory System is an open-source sales and inventory management system developed by SourceCodester. Version 1.0 of the SourceCodester Sales and Inventory System contains a SQL injection vulnerability. This vulnerability arises from incorrect handling of the purchase...

8.8CVSS6.6AI score0.00313EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2026/03/09 12:00 a.m.•25 views

SourceCodester Sales and Inventory System SQL Injection Vulnerability

The SourceCodester Sales and Inventory System is an open-source sales and inventory management system developed by SourceCodester. Version 1.0 of the SourceCodester Sales and Inventory System contains a SQL injection vulnerability. This vulnerability arises from incorrect operations with the sell...

8.8CVSS6.6AI score0.00383EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2026/03/09 12:00 a.m.•27 views

SourceCodester Payroll Management System: Code Injection Vulnerability

SourceCodester Payroll Management System is an open-source payroll management system developed by SourceCodester. Version 1.0 of the SourceCodester Payroll Management System has a code injection vulnerability. This vulnerability stems from incorrect handling of parameter IDs in the file...

6.1CVSS5AI score0.00281EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/09 12:00 a.m.•8 views

CVE-2026-3790: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in SourceCodester Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file checksupplierdetails.php of the component POST Parameter Handler. Executing a manipulation of the argument stockname1 can lead to sql injection. The attac...

8.8CVSS6.4AI score0.00313EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2026/03/09 12:00 a.m.•30 views

PT-2026-23991

Name of the Vulnerable Software and Affected Versions SourceCodester Sales and Inventory System version 1.0 Description A SQL injection issue exists in the Search component of SourceCodester Sales and Inventory System version 1.0. The issue is located in the dashboard.php file. Manipulating the...

8.8CVSS6.3AI score0.00313EPSS
SaveExploits1References12
Positive Technologies
Positive Technologies
•added 2026/03/09 12:00 a.m.•23 views

PT-2026-23990

Name of the Vulnerable Software and Affected Versions SourceCodester Sales and Inventory System version 1.0 Description A flaw exists in SourceCodester Sales and Inventory System 1.0 that allows for SQL injection. This issue is located within the check supplier details.php file and involves the...

8.8CVSS6.3AI score0.00313EPSS
SaveExploits1References13
Positive Technologies
Positive Technologies
•added 2026/03/09 12:00 a.m.•19 views

PT-2026-23997

Name of the Vulnerable Software and Affected Versions SourceCodester Sales and Inventory System version 1.0 Description A flaw exists in the GET Parameter Handler component of SourceCodester Sales and Inventory System 1.0, specifically within the purchase invoice.php file. The purchaseid argument...

8.8CVSS6.6AI score0.00313EPSS
SaveExploits1References12
Positive Technologies
Positive Technologies
•added 2026/03/09 12:00 a.m.•24 views

PT-2026-24009

Name of the Vulnerable Software and Affected Versions SourceCodester/janobe Resort Reservation System version 1.0 Description A flaw exists that allows unrestricted file uploads. This is due to improper handling of the image argument within the doInsert function located in the...

8.8CVSS6.6AI score0.00311EPSS
SaveExploits1References10
Positive Technologies
Positive Technologies
•added 2026/03/09 12:00 a.m.•26 views

PT-2026-24015

Name of the Vulnerable Software and Affected Versions SourceCodester/janobe Resort Reservation System version 1.0 Description A flaw exists in the processing of the /room rates.php file within the software. Manipulation of the q argument in this file can lead to a SQL injection condition. This...

8.8CVSS6.6AI score0.00313EPSS
SaveExploits1References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/09 12:00 a.m.•9 views

CVE-2026-3806: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in SourceCodester/janobe Resort Reservation System 1.0. This issue affects some unknown processing of the file /roomrates.php. This manipulation of the argument q causes sql injection. The attack can be initiated remotely. The exploit has been made available to the...

8.8CVSS6.5AI score0.00313EPSS
SaveExploits1References1
Rows per page
Query Builder