Lucene search
+L

54 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/18 12:00 a.m.•3 views

CVE-2026-2669: Improper Access Control

A vulnerability was determined in Rongzhitong Visual Integrated Command and Dispatch Platform up to 20260206. This impacts an unknown function of the file /dm/dispatch/user/delete of the component User Handler. This manipulation of the argument ID causes improper access controls. Remote...

6.9CVSS6.1AI score0.00671EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2026/02/18 12:00 a.m.•19 views

Rongzhitong Visual Integrated Command and Dispatch Platform 访问控制错误漏洞

Rongzhitong Visual Integrated Command and Dispatch Platform is an integrated command system for emergency management and public safety developed by Rongzhitong Corporation. The Rongzhitong Visual Integrated Command and Dispatch Platform versions 20260206 and earlier contained a access control...

6.9CVSS6.6AI score0.00671EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
•added 2026/02/10 1:23 a.m.•19 views

CVE-2026-2199

A security flaw has been discovered in code-projects Online Reviewer System 1.0. The impacted element is an unknown function of the file /reviewer/system/system/admins/manage/users/user-delete.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated...

9.8CVSS5.5AI score0.00343EPSS
SaveExploits1References1
OSV
OSV
•added 2026/02/09 1:16 a.m.•15 views

CVE-2026-2199

A security flaw has been discovered in code-projects Online Reviewer System 1.0. The impacted element is an unknown function of the file /reviewer/system/system/admins/manage/users/user-delete.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated...

9.8CVSS5.8AI score0.00343EPSS
SaveExploits1References5
NVD
NVD
•added 2026/02/09 1:16 a.m.•18 views

CVE-2026-2199

A security flaw has been discovered in code-projects Online Reviewer System 1.0. The impacted element is an unknown function of the file /reviewer/system/system/admins/manage/users/user-delete.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated...

9.8CVSS0.00343EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2026/02/09 12:32 a.m.•8 views

CVE-2026-2199 code-projects Online Reviewer System user-delete.php sql injection

A security flaw has been discovered in code-projects Online Reviewer System 1.0. The impacted element is an unknown function of the file /reviewer/system/system/admins/manage/users/user-delete.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated...

7.5CVSS7AI score0.00343EPSS
SaveExploits1References5
CVE
CVE
•added 2026/02/09 12:32 a.m.•47 views

CVE-2026-2199

The CVE-2026-2199 entry concerns code-projects Online Reviewer System 1.0. The vulnerability is in the file /reviewer/system/system/admins/manage/users/user-delete.php, where manipulation of the argument ID enables a SQL injection. Descriptions across multiple connected sources (NVD, Red Hat, CVE...

9.8CVSS7AI score0.00343EPSS
SaveExploits1References5Affected Software1
attackerkb
attackerkb
•added 2026/02/09 12:32 a.m.•8 views

CVE-2026-2199

A security flaw has been discovered in code-projects Online Reviewer System 1.0. The impacted element is an unknown function of the file /reviewer/system/system/admins/manage/users/user-delete.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated...

7.5CVSS5.5AI score0.00343EPSS
SaveExploits1References5Affected Software1
CNNVD
CNNVD
•added 2026/02/09 12:00 a.m.•17 views

Code-Projects Online Reviewer System SQL注入漏洞

The Code-Projects Online Reviewer System is an online review system developed by Code-Projects as open source. Version 1.0 of the Code-Projects Online Reviewer System has a SQL injection vulnerability. This vulnerability arises from incorrect handling of parameters with the ID in...

9.8CVSS7.2AI score0.00343EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2026/02/09 12:00 a.m.•26 views

PT-2026-7032

A security flaw has been discovered in code-projects Online Reviewer System 1.0. The impacted element is an unknown function of the file /reviewer/system/system/admins/manage/users/user-delete.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated...

7.5CVSS5.5AI score0.00343EPSS
SaveExploits1References6
OSV
OSV
•added 2025/12/19 1:16 a.m.•17 views

CVE-2025-14900

A security vulnerability has been detected in CodeAstro Real Estate Management System 1.0. Affected is an unknown function of the file /admin/userdelete.php of the component Administrator Endpoint. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. T...

7.2CVSS5.8AI score0.00401EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2019-16066

Malware in sbrugna...

8.8CVSS7.8AI score0.0065EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2023-1990

Malicious code in bioql PyPI...

5.4CVSS6.3AI score0.00658EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•21 views

EUVD-2025-18733

Malicious code in bioql PyPI...

8.1CVSS5.7AI score0.00517EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/22 12:00 a.m.•0 views

CVE-2025-7947: Improper Authorization

A vulnerability classified as critical has been found in jshERP up to 3.5. Affected is an unknown function of the file /user/delete of the component Account Handler. The manipulation of the argument ID leads to improper authorization. It is possible to launch the attack remotely. The exploit has...

8.1CVSS5.2AI score0.00403EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/07/21 12:00 a.m.•18 views

jshERP 安全漏洞

jshERP Huaxia ERP is a homegrown ERP system by the individual developer of Ji Shenghua in China. A security vulnerability exists in jshERP 3.5 and earlier versions, which stems from improper authorization due to incorrect manipulation of the parameter ID in the file /user/delete...

8.1CVSS5.2AI score0.00403EPSS
SaveExploits1References2
OSV
OSV
•added 2025/06/20 10:15 a.m.•14 views

CVE-2025-6329

A vulnerability was found in ScriptAndTools Real Estate Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file userdelete.php of the component User Delete Handler. The manipulation of the argument ID leads to authorization bypass. The attack m...

8.1CVSS5.5AI score0.00517EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/20 12:00 a.m.•2 views

CVE-2025-6329: Authorization Bypass Through User-Controlled Key

A vulnerability was found in ScriptAndTools Real Estate Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file userdelete.php of the component User Delete Handler. The manipulation of the argument ID leads to authorization bypass. The attack m...

8.1CVSS5.3AI score0.00517EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/06/20 12:00 a.m.•23 views

Real Estate Management System 安全漏洞

Real Estate Management System is an open source real estate management system from Itsourcecode. A security vulnerability exists in Real Estate Management System version 1.0, which results from an authorization bypass due to incorrect manipulation of the parameter ID in the file userdelete.php...

8.1CVSS5.5AI score0.00517EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2025/05/23 3:11 a.m.•14 views

CVE-2023-23550

An OS command injection vulnerability exists in the ysthirdparty userdelete functionality of Milesight UR32L v32.3.0.5. A specially crafted network packet can lead to command execution. An attacker can send a sequence of requests to trigger this vulnerability...

7.2CVSS7.8AI score0.03607EPSS
SaveExploits1References1
Rows per page
Query Builder