Lucene search
K

16073 matches found

NVD
NVD
added 2026/04/10 3:16 p.m.2 views

CVE-2026-36236

SourceCodester Engineers Online Portal v1.0 is vulnerable to SQL Injection in updatepassword.php via the newpassword parameter...

9.8CVSS0.00319EPSS
Exploits1References1
Cvelist
Cvelist
added 2026/04/10 12:0 a.m.23 views

CVE-2026-36236

SourceCodester Engineers Online Portal v1.0 is vulnerable to SQL Injection in updatepassword.php via the newpassword parameter...

0.00319EPSS
Exploits1References1
CNNVD
CNNVD
added 2026/04/10 12:0 a.m.8 views

SourceCodester Engineers Online Portal 安全漏洞

SourceCodester Engineers Online Portal is an online portal for engineers, developed by SourceCodester as open source. Version 1.0 of the SourceCodester Engineers Online Portal contains a security vulnerability. This vulnerability stems from the newpassword parameter in the updatepassword.php file...

9.8CVSS5.8AI score0.00319EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2026/04/10 12:0 a.m.3 views

CVE-2026-36236

SourceCodester Engineers Online Portal v1.0 is vulnerable to SQL Injection in updatepassword.php via the newpassword parameter...

5.9AI score0.00319EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2026/04/10 12:0 a.m.4 views

PT-2026-31931

SourceCodester Engineers Online Portal v1.0 is vulnerable to SQL Injection in update password.php via the new password parameter...

5.9AI score0.00319EPSS
Exploits1References2
EUVD
EUVD
added 2026/04/09 12:32 a.m.1 views

EUVD-2026-20788

A vulnerability was identified in SourceCodester Online Food Ordering System 1.0. Affected by this issue is the function saveproduct of the file /Actions.php of the component POST Parameter Handler. Such manipulation of the argument price leads to business logic errors. The attack may be performe...

5.5CVSS5.6AI score0.00246EPSS
Exploits0References6
EUVD
EUVD
added 2026/04/09 12:32 a.m.1 views

EUVD-2026-20803

A security flaw has been discovered in SourceCodester Pharmacy Product Management System 1.0. This affects an unknown part of the file add-sales.php of the component POST Parameter Handler. Performing a manipulation of the argument txtqty results in business logic errors. It is possible to initia...

5.5CVSS5.6AI score0.00241EPSS
Exploits0References6
EUVD
EUVD
added 2026/04/09 12:31 a.m.3 views

EUVD-2026-20787

A flaw has been found in SourceCodester Sales and Inventory System 1.0. Affected is an unknown function of the file /delete.php of the component GET Parameter Handler. This manipulation of the argument ID causes cross site scripting. Remote exploitation of the attack is possible. The exploit has...

5.1CVSS4.7AI score0.0024EPSS
Exploits0References6
NVD
NVD
added 2026/04/08 11:17 p.m.1 views

CVE-2026-5812

A security flaw has been discovered in SourceCodester Pharmacy Product Management System 1.0. This affects an unknown part of the file add-sales.php of the component POST Parameter Handler. Performing a manipulation of the argument txtqty results in business logic errors. It is possible to initia...

5.5CVSS0.00241EPSS
Exploits0References5
NVD
NVD
added 2026/04/08 11:17 p.m.3 views

CVE-2026-5811

A vulnerability was identified in SourceCodester Online Food Ordering System 1.0. Affected by this issue is the function saveproduct of the file /Actions.php of the component POST Parameter Handler. Such manipulation of the argument price leads to business logic errors. The attack may be performe...

5.5CVSS0.00246EPSS
Exploits0References5
Cvelist
Cvelist
added 2026/04/08 10:30 p.m.20 views

CVE-2026-5812 SourceCodester Pharmacy Product Management System POST Parameter add-sales.php logic error

A security flaw has been discovered in SourceCodester Pharmacy Product Management System 1.0. This affects an unknown part of the file add-sales.php of the component POST Parameter Handler. Performing a manipulation of the argument txtqty results in business logic errors. It is possible to initia...

5.5CVSS0.00241EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2026/04/08 10:30 p.m.2 views

CVE-2026-5812 SourceCodester Pharmacy Product Management System POST Parameter add-sales.php logic error

A security flaw has been discovered in SourceCodester Pharmacy Product Management System 1.0. This affects an unknown part of the file add-sales.php of the component POST Parameter Handler. Performing a manipulation of the argument txtqty results in business logic errors. It is possible to initia...

5.5CVSS5.8AI score0.00241EPSS
Exploits0References5
CVE
CVE
added 2026/04/08 10:30 p.m.8 views

CVE-2026-5812

CVE-2026-5812 – SourceCodester Pharmacy Product Management System 1.0 : A flaw in add-sales.php (POST Parameter Handler) allows manipulation of the txtqty parameter, triggering business-logic errors. Exploitation can be remote; exploit publicly released. No explicit patch/version details or vendo...

5.5CVSS5.6AI score0.00241EPSS
Exploits0References5
NVD
NVD
added 2026/04/08 10:16 p.m.3 views

CVE-2026-5810

A flaw has been found in SourceCodester Sales and Inventory System 1.0. Affected is an unknown function of the file /delete.php of the component GET Parameter Handler. This manipulation of the argument ID causes cross site scripting. Remote exploitation of the attack is possible. The exploit has...

5.1CVSS0.0024EPSS
Exploits0References5
Cvelist
Cvelist
added 2026/04/08 10:15 p.m.21 views

CVE-2026-5811 SourceCodester Online Food Ordering System POST Parameter Actions.php save_product logic error

A vulnerability was identified in SourceCodester Online Food Ordering System 1.0. Affected by this issue is the function saveproduct of the file /Actions.php of the component POST Parameter Handler. Such manipulation of the argument price leads to business logic errors. The attack may be performe...

5.5CVSS0.00246EPSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2026/04/08 10:15 p.m.1 views

CVE-2026-5811

A vulnerability was identified in SourceCodester Online Food Ordering System 1.0. Affected by this issue is the function saveproduct of the file /Actions.php of the component POST Parameter Handler. Such manipulation of the argument price leads to business logic errors. The attack may be performe...

5.5CVSS5.8AI score0.00246EPSS
Exploits0References5Affected Software1
Cvelist
Cvelist
added 2026/04/08 10:0 p.m.22 views

CVE-2026-5810 SourceCodester Sales and Inventory System GET Parameter delete.php cross site scripting

A flaw has been found in SourceCodester Sales and Inventory System 1.0. Affected is an unknown function of the file /delete.php of the component GET Parameter Handler. This manipulation of the argument ID causes cross site scripting. Remote exploitation of the attack is possible. The exploit has...

5.1CVSS0.0024EPSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2026/04/08 10:0 p.m.1 views

CVE-2026-5810

A flaw has been found in SourceCodester Sales and Inventory System 1.0. Affected is an unknown function of the file /delete.php of the component GET Parameter Handler. This manipulation of the argument ID causes cross site scripting. Remote exploitation of the attack is possible. The exploit has...

5.1CVSS4.7AI score0.0024EPSS
Exploits0References5Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/08 10:0 p.m.3 views

CVE-2026-5810 SourceCodester Sales and Inventory System GET Parameter delete.php cross site scripting

A flaw has been found in SourceCodester Sales and Inventory System 1.0. Affected is an unknown function of the file /delete.php of the component GET Parameter Handler. This manipulation of the argument ID causes cross site scripting. Remote exploitation of the attack is possible. The exploit has...

5.1CVSS4.5AI score0.0024EPSS
Exploits0References5
CVE
CVE
added 2026/04/08 10:0 p.m.7 views

CVE-2026-5810

Summary (CVE-2026-5810): A flaw in SourceCodester Sales and Inventory System 1.0 affects an unknown function in /delete.php that handles the GET parameter ID. Manipulating this argument leads to cross-site scripting (XSS). Remote exploitation is possible, and the exploit has been published. CVSS ...

5.1CVSS4.7AI score0.0024EPSS
Exploits0References5
Rows per page
Query Builder