Lucene search
K

54 matches found

RedhatCVE
RedhatCVE
added 2026/03/09 7:54 p.m.4 views

CVE-2026-3746

A vulnerability was determined in SourceCodester Simple Responsive Tourism Website 1.0. Affected by this vulnerability is an unknown functionality of the file /tourism/classes/Login.php?f=login of the component Login. This manipulation of the argument Username causes sql injection. The attack may...

9.8CVSS5.7AI score0.00379EPSS
Exploits1References1
EUVD
EUVD
added 2026/03/08 6:30 p.m.6 views

EUVD-2026-10249

A vulnerability was determined in SourceCodester Simple Responsive Tourism Website 1.0. Affected by this vulnerability is an unknown functionality of the file /tourism/classes/Login.php?f=login of the component Login. This manipulation of the argument Username causes sql injection. The attack may...

7.5CVSS6.9AI score0.00379EPSS
Exploits1References7
OSV
OSV
added 2026/03/08 4:16 p.m.5 views

CVE-2026-3746

A vulnerability was determined in SourceCodester Simple Responsive Tourism Website 1.0. Affected by this vulnerability is an unknown functionality of the file /tourism/classes/Login.php?f=login of the component Login. This manipulation of the argument Username causes sql injection. The attack may...

9.8CVSS5.7AI score0.00379EPSS
Exploits1References6
NVD
NVD
added 2026/03/08 4:16 p.m.6 views

CVE-2026-3746

A vulnerability was determined in SourceCodester Simple Responsive Tourism Website 1.0. Affected by this vulnerability is an unknown functionality of the file /tourism/classes/Login.php?f=login of the component Login. This manipulation of the argument Username causes sql injection. The attack may...

9.8CVSS0.00379EPSS
Exploits1References6
Vulnrichment
Vulnrichment
added 2026/03/08 3:32 p.m.3 views

CVE-2026-3746 SourceCodester Simple Responsive Tourism Website Login Login.php sql injection

A vulnerability was determined in SourceCodester Simple Responsive Tourism Website 1.0. Affected by this vulnerability is an unknown functionality of the file /tourism/classes/Login.php?f=login of the component Login. This manipulation of the argument Username causes sql injection. The attack may...

7.5CVSS5.7AI score0.00379EPSS
Exploits1References6
ATTACKERKB
ATTACKERKB
added 2026/03/08 3:32 p.m.3 views

CVE-2026-3746

A vulnerability was determined in SourceCodester Simple Responsive Tourism Website 1.0. Affected by this vulnerability is an unknown functionality of the file /tourism/classes/Login.php?f=login of the component Login. This manipulation of the argument Username causes sql injection. The attack may...

7.5CVSS5.7AI score0.00379EPSS
Exploits1References6Affected Software1
CVE
CVE
added 2026/03/08 3:32 p.m.14 views

CVE-2026-3746

Consolidated details across multiple sources identify CVE-2026-3746 as a SQL injection in SourceCodester Simple Responsive Tourism Website 1.0, affecting the Login component’s file /tourism/classes/Login.php?f=login. The bug arises from manipulating the Username argument, enabling remote exploita...

9.8CVSS6.9AI score0.00379EPSS
Exploits1References6Affected Software1
CNNVD
CNNVD
added 2026/03/08 12:0 a.m.6 views

SourceCodester Simple Responsive Tourism Website SQL注入漏洞

SourceCodester Simple Responsive Tourism Website is an open-source tourism website developed by SourceCodester. Version 1.0 of SourceCodester Simple Responsive Tourism Website has a SQL injection vulnerability. This vulnerability stems from the handling of the Username parameter in the Login.php...

9.8CVSS7.2AI score0.00379EPSS
Exploits1References7
GithubExploit
GithubExploit
added 2026/02/21 3:58 p.m.176 views

Exploit for SQL Injection in Oretnom23 Simple_Responsive_Tourism_Website

file /classes/Master.php?f=register of the SQL Injection CVE-...

9.8CVSS5.8AI score0.00326EPSS
Exploits2
OSV
OSV
added 2026/02/20 5:25 p.m.2 views

CVE-2026-2848

A flaw has been found in SourceCodester Simple Responsive Tourism Website 1.0. Affected by this vulnerability is an unknown functionality of the file /classes/Master.php?f=register of the component Registration. This manipulation of the argument Username causes sql injection. The attack may be...

9.8CVSS5.7AI score0.00326EPSS
Exploits2References5
NVD
NVD
added 2026/02/20 5:25 p.m.4 views

CVE-2026-2848

A flaw has been found in SourceCodester Simple Responsive Tourism Website 1.0. Affected by this vulnerability is an unknown functionality of the file /classes/Master.php?f=register of the component Registration. This manipulation of the argument Username causes sql injection. The attack may be...

9.8CVSS0.00326EPSS
Exploits2References5
ATTACKERKB
ATTACKERKB
added 2026/02/20 4:2 p.m.6 views

CVE-2026-2848

A flaw has been found in SourceCodester Simple Responsive Tourism Website 1.0. Affected by this vulnerability is an unknown functionality of the file /classes/Master.php?f=register of the component Registration. This manipulation of the argument Username causes sql injection. The attack may be...

9.8CVSS7.1AI score0.00326EPSS
Exploits2References5Affected Software1
CVE
CVE
added 2026/02/20 4:2 p.m.23 views

CVE-2026-2848

CVE-2026-2848 affects SourceCodester Simple Responsive Tourism Website 1.0 . The vulnerability lies in an unknown functionality of the file /classes/Master.php?f=register during registration, where manipulating the Username argument allows SQL injection. The issue can be exploited remotely, and a...

9.8CVSS7.1AI score0.00326EPSS
Exploits2References5Affected Software1
Positive Technologies
Positive Technologies
added 2026/02/20 12:0 a.m.7 views

PT-2026-21246

Name of the Vulnerable Software and Affected Versions SourceCodester Simple Responsive Tourism Website version 1.0 Description A flaw exists in SourceCodester Simple Responsive Tourism Website that allows for SQL injection. This issue is related to the manipulation of the Username argument within...

9.8CVSS7.1AI score0.00326EPSS
Exploits2References8
RedhatCVE
RedhatCVE
added 2026/02/09 7:23 p.m.4 views

CVE-2026-2159

A flaw has been found in SourceCodester Simple Responsive Tourism Website 1.0. Affected is an unknown function of the file /tourism/classes/Master.php?f=register of the component Registration. Executing a manipulation of the argument firstname/lastname/username can lead to cross site scripting. I...

6.1CVSS3.7AI score0.00352EPSS
Exploits1References1
NVD
NVD
added 2026/02/08 4:15 p.m.7 views

CVE-2026-2160

A vulnerability has been found in SourceCodester Simple Responsive Tourism Website 1.0. Affected by this vulnerability is an unknown functionality of the file /tourism/classes/Master.php?f=savepackage. The manipulation of the argument Title leads to cross site scripting. The attack can be initiat...

6.1CVSS0.00262EPSS
Exploits1References5
OSV
OSV
added 2026/02/08 4:15 p.m.4 views

CVE-2026-2160

A vulnerability has been found in SourceCodester Simple Responsive Tourism Website 1.0. Affected by this vulnerability is an unknown functionality of the file /tourism/classes/Master.php?f=savepackage. The manipulation of the argument Title leads to cross site scripting. The attack can be initiat...

6.1CVSS4.2AI score0.00262EPSS
Exploits1References5
OSV
OSV
added 2026/02/08 4:15 p.m.3 views

CVE-2026-2159

A flaw has been found in SourceCodester Simple Responsive Tourism Website 1.0. Affected is an unknown function of the file /tourism/classes/Master.php?f=register of the component Registration. Executing a manipulation of the argument firstname/lastname/username can lead to cross site scripting. I...

6.1CVSS4.1AI score0.00352EPSS
Exploits1References5
Cvelist
Cvelist
added 2026/02/08 3:32 p.m.34 views

CVE-2026-2160 SourceCodester Simple Responsive Tourism Website Master.php cross site scripting

A vulnerability has been found in SourceCodester Simple Responsive Tourism Website 1.0. Affected by this vulnerability is an unknown functionality of the file /tourism/classes/Master.php?f=savepackage. The manipulation of the argument Title leads to cross site scripting. The attack can be initiat...

5.3CVSS0.00262EPSS
Exploits1References5
ATTACKERKB
ATTACKERKB
added 2026/02/08 3:32 p.m.3 views

CVE-2026-2160

A vulnerability has been found in SourceCodester Simple Responsive Tourism Website 1.0. Affected by this vulnerability is an unknown functionality of the file /tourism/classes/Master.php?f=savepackage. The manipulation of the argument Title leads to cross site scripting. The attack can be initiat...

5.3CVSS3.7AI score0.00262EPSS
Exploits1References5Affected Software1
Rows per page
Query Builder