Lucene search
+L

7223 matches found

BDU FSTEC
BDU FSTEC
•added 2026/02/09 12:00 a.m.•17 views

The vulnerability of the OpenSky flight planning and operational management system, related to the lack of measures to protect the SQL query structure, allows attackers to execute arbitrary SQL queries.

The vulnerability of the OpenSky flight planning and operational management system lies in the lack of measures taken to protect the SQL query structure during the processing of the TestId parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

6.8CVSS6.2AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/02/09 12:00 a.m.•31 views

The vulnerability of the OpenSky flight planning and operational management system, related to the lack of measures to protect the SQL query structure, allows attackers to execute arbitrary SQL queries.

The vulnerability of the OpenSky flight planning and operational management system lies in the lack of measures taken to protect the SQL query structure during the processing of the filename parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotel...

7.7CVSS6.2AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/02/09 12:00 a.m.•13 views

The vulnerability of the OpenSky flight planning and operational management system, related to the lack of measures to protect the SQL query structure, allows attackers to execute arbitrary SQL queries.

The vulnerability of the OpenSky flight planning and operational management system lies in the lack of measures taken to protect the SQL query structure during the processing of the fileid parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

7.7CVSS6.2AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/02/09 12:00 a.m.•18 views

The vulnerability of the OpenSky flight planning and operational management system, related to the lack of measures to protect the SQL query structure, allows attackers to execute arbitrary SQL queries.

The vulnerability of the OpenSky flight planning and operational management system lies in the lack of measures taken to protect the SQL query structure during the processing of the selectmonth parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries...

5.3CVSS6.2AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/02/09 12:00 a.m.•11 views

The vulnerability of the OpenSky flight planning and operational management system, related to the lack of measures to protect the SQL query structure, allows attackers to execute arbitrary SQL queries.

The vulnerability of the OpenSky flight planning and operational management system lies in the lack of measures taken to protect the SQL query structure when processing the folderid parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

6.8CVSS6.2AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/02/09 12:00 a.m.•14 views

The vulnerability of the OpenSky flight planning and operational management system, related to the lack of measures to protect the SQL query structure, allows attackers to execute arbitrary SQL queries.

The vulnerability of the OpenSky flight planning and operational management system lies in the failure to protect the SQL query structure during the processing of the QTestId parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

6.8CVSS6.1AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/02/09 12:00 a.m.•12 views

The vulnerability of the OpenSky flight planning and operational management system, related to the lack of measures to protect the SQL query structure, allows attackers to execute arbitrary SQL queries.

The vulnerability of the OpenSky flight planning and operational management system lies in the lack of measures taken to protect the SQL query structure during the processing of the getLogPlan parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries...

7.7CVSS6.2AI score
SaveExploits0Affected Software1
EUVD
EUVD
•added 2026/02/08 7:32 p.m.•25 views

EUVD-2026-5771

A vulnerability was determined in PHPGurukul Hospital Management System 4.0. This impacts an unknown function of the file /admin/manage-users.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be...

7.2CVSS5.3AI score0.00357EPSS
SaveExploits1References6
EUVD
EUVD
•added 2026/02/08 7:02 p.m.•23 views

EUVD-2026-5774

A security vulnerability has been detected in code-projects Contact Management System 1.0. This issue affects some unknown processing of the file index.py. Such manipulation of the argument selecteditem0 leads to sql injection. The attack can be executed remotely...

8.8CVSS5.4AI score0.00282EPSS
SaveExploits0References4
CVE
CVE
•added 2026/02/08 7:02 p.m.•36 views

CVE-2026-2176

CVE-2026-2176 affects code-projects Contact Management System 1.0. The issue is a SQL injection caused by manipulating the argument selecteditem[0] in the file index.py, with remote execution possible. Multiple connected sources corroborate the vulnerability in index.py and its impact, without pr...

8.8CVSS6.4AI score0.00282EPSS
SaveExploits0References4Affected Software1
EUVD
EUVD
•added 2026/02/08 6:32 p.m.•18 views

EUVD-2026-5777

A vulnerability was identified in code-projects Online Examination System 1.0. Affected by this issue is some unknown functionality of the file login.php. The manipulation of the argument username/password leads to sql injection. The attack may be initiated remotely...

9.8CVSS5.4AI score0.00363EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/02/08 6:02 p.m.•20 views

EUVD-2026-5779

A vulnerability was found in code-projects Online Student Management System 1.0. Affected is an unknown function of the file accounts.php of the component Login. Performing a manipulation of the argument username/password results in sql injection. The attack can be initiated remotely. The exploit...

9.8CVSS5.3AI score0.00441EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/02/08 5:02 p.m.•24 views

EUVD-2026-5783

A security vulnerability has been detected in code-projects Online Reviewer System 1.0. The affected element is an unknown function of the file /login/index.php of the component Login. The manipulation of the argument username/password leads to sql injection. The attack is possible to be carried...

9.8CVSS5.3AI score0.00469EPSS
SaveExploits1References6
OSV
OSV
•added 2026/02/08 4:15 p.m.•16 views

CVE-2026-2162

A vulnerability was determined in itsourcecode News Portal Project 1.0. This affects an unknown part of the file /admin/aboutus.php. This manipulation of the argument pagetitle causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized...

7.2CVSS5.7AI score0.00358EPSS
SaveExploits1References5
attackerkb
attackerkb
•added 2026/02/08 4:02 p.m.•25 views

CVE-2026-2161

A vulnerability was found in itsourcecode Directory Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/forget-password.php. The manipulation of the argument email results in sql injection. The attack can be launched remotely. The exploit has been made...

7.5CVSS7.1AI score0.00433EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2026/02/08 3:02 p.m.•13 views

CVE-2026-2158 code-projects Student Web Portal check_user.php sql injection

A vulnerability was detected in code-projects Student Web Portal 1.0. This impacts an unknown function of the file /checkuser.php. Performing a manipulation of the argument Username results in sql injection. It is possible to initiate the attack remotely...

7.5CVSS7AI score0.00431EPSS
SaveExploits1References5
OSV
OSV
•added 2026/02/08 6:16 a.m.•25 views

CVE-2026-2136

A flaw has been found in projectworlds Online Food Ordering System 1.0. This affects an unknown function of the file /view-ticket.php. Executing a manipulation of the argument ID can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may be use...

9.8CVSS5.8AI score0.00379EPSS
SaveExploits1References4
NVD
NVD
•added 2026/02/08 4:15 a.m.•29 views

CVE-2026-2132

A security flaw has been discovered in code-projects Online Music Site 1.0. This issue affects some unknown processing of the file /Administrator/PHP/AdminUpdateCategory.php. The manipulation of the argument txtcat results in sql injection. The attack can be executed remotely. The exploit has bee...

9.8CVSS0.00376EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2026/02/08 12:00 a.m.•24 views

PHPGurukul Hospital Management System SQL注入漏洞

PHPGurukul Hospital Management System is a hospital management system developed by PHPGurukul company, based on PHP and MySQL. Version 4.0 of PHPGurukul Hospital Management System has a SQL injection vulnerability. This vulnerability arises from incorrect handling of the parameter ID in the file...

7.2CVSS5.8AI score0.00357EPSS
SaveExploits1References7
CNNVD
CNNVD
•added 2026/02/08 12:00 a.m.•27 views

PHPGurukul Hospital Management System SQL注入漏洞

PHPGurukul Hospital Management System is a hospital management system developed by PHPGurukul company, based on PHP and MySQL. Version 4.0 of PHPGurukul Hospital Management System has a SQL injection vulnerability. This vulnerability arises from incorrect handling of parameter IDs in the file...

7.2CVSS5.8AI score0.00356EPSS
SaveExploits1References6
Rows per page
Query Builder