Lucene search
K

44 matches found

RedhatCVE
RedhatCVE
added 2026/04/14 7:23 p.m.3 views

CVE-2026-36233

A SQL injection vulnerability was found in the assignInstructorSubjects.php file of itsourcecode Online Student Enrollment System v1.0. The reason for this issue is that attackers can inject malicious code via the parameter "subjcode" and use it directly in SQL queries without the need for...

9.8CVSS5.9AI score0.0005EPSS
Exploits1References1
NVD
NVD
added 2026/04/10 3:16 p.m.0 views

CVE-2026-36233

A SQL injection vulnerability was found in the assignInstructorSubjects.php file of itsourcecode Online Student Enrollment System v1.0. The reason for this issue is that attackers can inject malicious code via the parameter "subjcode" and use it directly in SQL queries without the need for...

9.8CVSS0.0005EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2026/04/10 12:0 a.m.1 views

PT-2026-31930

A SQL injection vulnerability was found in the assignInstructorSubjects.php file of itsourcecode Online Student Enrollment System v1.0. The reason for this issue is that attackers can inject malicious code via the parameter "subjcode" and use it directly in SQL queries without the need for...

5.9AI score0.0005EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2026/04/10 12:0 a.m.1 views

CVE-2026-36235

A SQL injection vulnerability was found in the scheduleSubList.php file of itsourcecode Online Student Enrollment System v1.0. The reason for this issue is that the 'subjcode' parameter is directly embedded into the SQL query via string interpolation without any sanitization or validation...

5.8AI score0.00047EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/03/26 3:15 p.m.1 views

CVE-2026-4614

A vulnerability was determined in itsourcecode sanitize or validate this input 1.0. This issue affects some unknown processing of the file /admin/subjects.php of the component Parameter Handler. This manipulation of the argument subjectcode causes sql injection. The attack is possible to be carri...

6.5CVSS6.3AI score0.00042EPSS
Exploits0References1
NVD
NVD
added 2026/03/24 12:16 a.m.1 views

CVE-2026-4614

A vulnerability was determined in itsourcecode sanitize or validate this input 1.0. This issue affects some unknown processing of the file /admin/subjects.php of the component Parameter Handler. This manipulation of the argument subjectcode causes sql injection. The attack is possible to be carri...

6.5CVSS0.00042EPSS
Exploits0References5
CNNVD
CNNVD
added 2026/03/24 12:0 a.m.6 views

itsourcecode College Management System SQL注入漏洞

itsourcecode College Management System is an open-source university management system developed by itsourcecode. Version 1.0 of itsourcecode College Management System has a SQL injection vulnerability. This vulnerability arises from incorrect handling of the subjectcode parameter in the file...

6.5CVSS6.6AI score0.00042EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2026/03/23 11:38 p.m.2 views

CVE-2026-4614 itsourcecode sanitize or validate this input Parameter subjects.php sql injection

A vulnerability was determined in itsourcecode sanitize or validate this input 1.0. This issue affects some unknown processing of the file /admin/subjects.php of the component Parameter Handler. This manipulation of the argument subjectcode causes sql injection. The attack is possible to be carri...

6.5CVSS6.3AI score0.00042EPSS
Exploits0References5
CVE
CVE
added 2026/03/23 11:38 p.m.2 views

CVE-2026-4614

CVE-2026-4614 : A vulnerability in itsourcecode sanitization/validation affects the Parameter Handler’s processing of /admin/subjects.php, where manipulation of the subject_code argument enables SQL injection. The issue can be exploited remotely and exploit details have been publicly disclosed. C...

6.5CVSS6.3AI score0.00042EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2026/03/23 12:0 a.m.1 views

PT-2026-27268

Name of the Vulnerable Software and Affected Versions itsourcecode sanitize or validate this input version 1.0 Description A flaw exists in the processing of the /admin/subjects.php file within the Parameter Handler component. Manipulation of the subject code argument can lead to SQL injection...

6.5CVSS6.6AI score0.00042EPSS
Exploits0References7
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-30401

Malicious code in bioql PyPI...

9.8CVSS7.5AI score0.00046EPSS
Exploits1References6
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-30400

Malicious code in bioql PyPI...

9.8CVSS7.5AI score0.00042EPSS
Exploits1References6
RedhatCVE
RedhatCVE
added 2025/09/24 5:35 a.m.3 views

CVE-2025-10784

A security vulnerability has been detected in Campcodes Online Learning Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/editsubject.php. The manipulation of the argument subjectcode leads to sql injection. It is possible to initiate the attack...

9.8CVSS7AI score0.00042EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/09/24 5:35 a.m.3 views

CVE-2025-10783

A weakness has been identified in Campcodes Online Learning Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/addsubject.php. Executing manipulation of the argument subjectcode can lead to sql injection. The attack may be performed from remote. T...

9.8CVSS7AI score0.00046EPSS
Exploits1References1
NVD
NVD
added 2025/09/22 6:15 a.m.2 views

CVE-2025-10784

A security vulnerability has been detected in Campcodes Online Learning Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/editsubject.php. The manipulation of the argument subjectcode leads to sql injection. It is possible to initiate the attack...

9.8CVSS0.00042EPSS
Exploits1References5
OSV
OSV
added 2025/09/22 6:15 a.m.1 views

CVE-2025-10784

A security vulnerability has been detected in Campcodes Online Learning Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/editsubject.php. The manipulation of the argument subjectcode leads to sql injection. It is possible to initiate the attack...

9.8CVSS5.8AI score
Exploits0References5
Cvelist
Cvelist
added 2025/09/22 5:32 a.m.7 views

CVE-2025-10784 Campcodes Online Learning Management System edit_subject.php sql injection

A security vulnerability has been detected in Campcodes Online Learning Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/editsubject.php. The manipulation of the argument subjectcode leads to sql injection. It is possible to initiate the attack...

7.5CVSS0.00042EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/09/22 5:32 a.m.2 views

CVE-2025-10784 Campcodes Online Learning Management System edit_subject.php sql injection

A security vulnerability has been detected in Campcodes Online Learning Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/editsubject.php. The manipulation of the argument subjectcode leads to sql injection. It is possible to initiate the attack...

7.5CVSS6.8AI score0.00042EPSS
Exploits1References5
NVD
NVD
added 2025/09/22 5:15 a.m.3 views

CVE-2025-10783

A weakness has been identified in Campcodes Online Learning Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/addsubject.php. Executing manipulation of the argument subjectcode can lead to sql injection. The attack may be performed from remote. T...

9.8CVSS0.00046EPSS
Exploits1References5
CVE
CVE
added 2025/09/22 5:2 a.m.12 views

CVE-2025-10783

CVE-2025-10783 affects Campcodes Online Learning Management System v1.0; vulnerability in /admin/add_subject.php where manipulating the subject_code parameter can cause SQL injection. Exploitation is remote and public exploits exist. No official patch details in provided docs; consider temporary ...

9.8CVSS7.2AI score0.00046EPSS
Exploits1References5Affected Software1
Rows per page
Query Builder