Lucene search
+L

24 matches found

NVD
NVD
•added 2026/09/07 11:17 a.m.•9 views

CVE-2026-86294

A vulnerability has been found in SourceCodester Simple Traffic Offense System 1.0. Affected by this issue is some unknown functionality of the file save-settings.php of the component Settings Update Endpoint. The manipulation of the argument sitename/sitedesc leads to cross site scripting. Remot...

5.3CVSS0.0047EPSS
SaveExploits0References6
NVD
NVD
•added 2026/09/07 10:16 a.m.•6 views

CVE-2026-86293

A flaw has been found in SourceCodester Simple Traffic Offense System 1.0. Affected by this vulnerability is an unknown functionality of the file delete-user.php of the component Deletion Endpoint. Executing a manipulation of the argument ID can lead to missing authentication. The attack may be...

6.9CVSS0.00758EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/09/07 10:00 a.m.•40 views

CVE-2026-86294 SourceCodester Simple Traffic Offense System Settings Update Endpoint save-settings.php cross site scripting

A vulnerability has been found in SourceCodester Simple Traffic Offense System 1.0. Affected by this issue is some unknown functionality of the file save-settings.php of the component Settings Update Endpoint. The manipulation of the argument sitename/sitedesc leads to cross site scripting. Remot...

5.3CVSS0.0047EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/09/07 10:00 a.m.•11 views

EUVD-2026-72342

A vulnerability has been found in SourceCodester Simple Traffic Offense System 1.0. Affected by this issue is some unknown functionality of the file save-settings.php of the component Settings Update Endpoint. The manipulation of the argument sitename/sitedesc leads to cross site scripting. Remot...

5.3CVSS3.7AI score0.0047EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/09/07 10:00 a.m.•8 views

CVE-2026-86294 SourceCodester Simple Traffic Offense System Settings Update Endpoint save-settings.php cross site scripting

A vulnerability has been found in SourceCodester Simple Traffic Offense System 1.0. Affected by this issue is some unknown functionality of the file save-settings.php of the component Settings Update Endpoint. The manipulation of the argument sitename/sitedesc leads to cross site scripting. Remot...

5.3CVSS3.7AI score0.0047EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/09/07 9:45 a.m.•10 views

CVE-2026-86293 SourceCodester Simple Traffic Offense System Deletion Endpoint delete-user.php missing authentication

A flaw has been found in SourceCodester Simple Traffic Offense System 1.0. Affected by this vulnerability is an unknown functionality of the file delete-user.php of the component Deletion Endpoint. Executing a manipulation of the argument ID can lead to missing authentication. The attack may be...

6.9CVSS6.3AI score0.00758EPSS
SaveExploits0References6
CVE
CVE
•added 2026/09/07 9:45 a.m.•14 views

CVE-2026-86293

A missing authentication flaw exists in the Deletion Endpoint (file delete-user.php) of SourceCodester Simple Traffic Offense System 1.0 . By manipulating the ID argument remotely without authentication, an attacker can perform unauthorized deletion operations, resulting in low integrity and low ...

6.9CVSS6.3AI score0.00758EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/09/07 9:45 a.m.•46 views

CVE-2026-86293 SourceCodester Simple Traffic Offense System Deletion Endpoint delete-user.php missing authentication

A flaw has been found in SourceCodester Simple Traffic Offense System 1.0. Affected by this vulnerability is an unknown functionality of the file delete-user.php of the component Deletion Endpoint. Executing a manipulation of the argument ID can lead to missing authentication. The attack may be...

6.9CVSS0.00758EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/09/07 9:30 a.m.•38 views

CVE-2026-86292 SourceCodester Simple Traffic Offense System User Creation saveuser.php missing authentication

A vulnerability was detected in SourceCodester Simple Traffic Offense System 1.0. Affected is an unknown function of the file saveuser.php of the component User Creation. Performing a manipulation of the argument position results in missing authentication. The attack may be initiated remotely. Th...

7.5CVSS0.00686EPSS
SaveExploits0References6
CVE
CVE
•added 2026/09/07 9:30 a.m.•15 views

CVE-2026-86292

SourceCodester Simple Traffic Offense System 1.0 is vulnerable to missing authentication in the User Creation component, specifically the file saveuser.php . Manipulating the position argument allows an unauthenticated remote attacker to bypass access controls, leading to low impacts on confident...

7.5CVSS7AI score0.00686EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/07 12:00 a.m.•2 views

CVE-2026-86294: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in SourceCodester Simple Traffic Offense System 1.0. Affected by this issue is some unknown functionality of the file save-settings.php of the component Settings Update Endpoint. The manipulation of the argument sitename/sitedesc leads to cross site scripting. Remot...

5.3CVSS4AI score0.0047EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•17 views

PT-2026-86668

A flaw has been found in SourceCodester Simple Traffic Offense System 1.0. Affected by this vulnerability is an unknown functionality of the file delete-user.php of the component Deletion Endpoint. Executing a manipulation of the argument ID can lead to missing authentication. The attack may be...

6.9CVSS6.3AI score0.00758EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/07 12:00 a.m.•2 views

CVE-2026-86293: Missing Authentication for Critical Function

A flaw has been found in SourceCodester Simple Traffic Offense System 1.0. Affected by this vulnerability is an unknown functionality of the file delete-user.php of the component Deletion Endpoint. Executing a manipulation of the argument ID can lead to missing authentication. The attack may be...

6.9CVSS5.4AI score0.00758EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/07 12:00 a.m.•1 views

CVE-2026-86292: Missing Authentication for Critical Function

A vulnerability was detected in SourceCodester Simple Traffic Offense System 1.0. Affected is an unknown function of the file saveuser.php of the component User Creation. Performing a manipulation of the argument position results in missing authentication. The attack may be initiated remotely. Th...

7.5CVSS5.4AI score0.00686EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•18 views

PT-2026-86678

A vulnerability has been found in SourceCodester Simple Traffic Offense System 1.0. Affected by this issue is some unknown functionality of the file save-settings.php of the component Settings Update Endpoint. The manipulation of the argument site name/site desc leads to cross site scripting...

5.3CVSS3.7AI score0.0047EPSS
SaveExploits0References7
CNVD
CNVD
•added 2025/06/11 12:00 a.m.•13 views

Traffic Offense Reporting System save-settings.php file cross-site scripting vulnerability

Traffic Offense Reporting System is a traffic violation reporting system. Traffic Offense Reporting System suffers from a cross-site scripting vulnerability, which stems from the lack of effective filtering and escaping of user-supplied data by the sitename parameter in the save-settings.php file...

5.4CVSS6.4AI score0.00327EPSS
SaveExploits1References1
CNVD
CNVD
•added 2025/06/10 12:00 a.m.•14 views

Traffic Offense Reporting System Cross-Site Request Forgery Vulnerability

Traffic Offense Reporting System is a traffic violation reporting system. The Traffic Offense Reporting System suffers from a cross-site request forgery vulnerability that arises from a web application that does not adequately validate that a request is coming from a trusted user. An attacker cou...

8.8CVSS6.8AI score0.0031EPSS
SaveExploits1References1
CNVD
CNVD
•added 2025/06/10 12:00 a.m.•21 views

Traffic Offense Reporting System save-reported.php file cross-site scripting vulnerability

Traffic Offense Reporting System is a traffic violation reporting system. Traffic Offense Reporting System has a cross-site scripting vulnerability that originates from the parameter offenseid/vehicleno/driverlicense/name/address/gender/officer in the file /save-reported.php. The lack of effectiv...

5.4CVSS6.1AI score0.00308EPSS
SaveExploits1References1
OSV
OSV
•added 2025/06/06 11:15 a.m.•15 views

CVE-2025-5757

A vulnerability was found in code-projects Traffic Offense Reporting System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /save-reported.php. The manipulation of the argument...

5.4CVSS3.6AI score0.00308EPSS
SaveExploits1References5
OSV
OSV
•added 2025/06/05 2:15 p.m.•13 views

CVE-2025-5661

A vulnerability, which was classified as problematic, was found in code-projects Traffic Offense Reporting System 1.0. This affects an unknown part of the file /save-settings.php of the component Setting Handler. The manipulation of the argument sitename leads to cross site scripting. It is...

5.4CVSS3.7AI score0.00327EPSS
SaveExploits1References5
Rows per page
Query Builder