Lucene search
K

2384 matches found

ATTACKERKB
ATTACKERKB
added 2026/05/02 1:30 p.m.4 views

CVE-2026-7631

A vulnerability was found in code-projects Online Hospital Management System 1.0. The impacted element is an unknown function of the component Registration Handler. The manipulation of the argument Username results in improper authorization. The attack can be executed remotely. The exploit has be...

5.5CVSS5.7AI score0.00225EPSS
Exploits0References5Affected Software1
NVD
NVD
added 2026/05/01 6:16 a.m.9 views

CVE-2026-7555

A vulnerability was identified in itsourcecode Electronic Judging System 1.0. This affects an unknown part of the file /intrams/login.php. Such manipulation of the argument Username leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be used...

7.5CVSS0.00259EPSS
Exploits0References5
CVE
CVE
added 2026/05/01 5:45 a.m.19 views

CVE-2026-7555

The CVE-2026-7555 entry describes a SQL injection in itsourcecode Electronic Judging System 1.0, affecting the /intrams/login.php component where the Username parameter is manipulated. The vulnerability can be exploited remotely, and exploitation code is publicly available. The available data do ...

7.5CVSS7.4AI score0.00259EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2026/05/01 12:0 a.m.10 views

PT-2026-36302

A vulnerability was identified in itsourcecode Electronic Judging System 1.0. This affects an unknown part of the file /intrams/login.php. Such manipulation of the argument Username leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be used...

7.5CVSS7AI score0.00259EPSS
Exploits0References6
NVD
NVD
added 2026/04/27 1:16 a.m.12 views

CVE-2026-7070

A weakness has been identified in code-projects Inventory Management System 1.0. Affected is an unknown function of the component Login. Executing a manipulation of the argument Username can lead to sql injection. The attack may be launched remotely. The exploit has been made available to the...

7.5CVSS0.00254EPSS
Exploits0References5
EUVD
EUVD
added 2026/04/27 12:45 a.m.6 views

EUVD-2026-25748

A vulnerability was detected in CodePanda Source canteenmanagementsystem 1.0. Affected by this issue is some unknown functionality of the file /api/login.php. The manipulation of the argument Username results in sql injection. The attack can be executed remotely. The exploit is now public and may...

7.5CVSS7.3AI score0.00254EPSS
Exploits0References4
CVE
CVE
added 2026/04/27 12:45 a.m.14 views

CVE-2026-7072

CVE-2026-7072 affects CodePanda Source canteen_management_system 1.0. The flaw resides in the login component (file /api/login.php), where manipulating the Username parameter enables a SQL injection. The vulnerability is exploitable remotely and the exploit is public. Metrics indicate CVSS metric...

7.5CVSS7.3AI score0.00254EPSS
Exploits0References4
Cvelist
Cvelist
added 2026/04/27 12:15 a.m.29 views

CVE-2026-7070 code-projects Inventory Management System Login sql injection

A weakness has been identified in code-projects Inventory Management System 1.0. Affected is an unknown function of the component Login. Executing a manipulation of the argument Username can lead to sql injection. The attack may be launched remotely. The exploit has been made available to the...

7.5CVSS0.00254EPSS
Exploits0References5
EUVD
EUVD
added 2026/04/27 12:15 a.m.7 views

EUVD-2026-25746

A weakness has been identified in code-projects Inventory Management System 1.0. Affected is an unknown function of the component Login. Executing a manipulation of the argument Username can lead to sql injection. The attack may be launched remotely. The exploit has been made available to the...

7.5CVSS7.3AI score0.00254EPSS
Exploits0References5
CNNVD
CNNVD
added 2026/04/27 12:0 a.m.10 views

Code-Projects Inventory Management System 注入漏洞

The Code-Projects Inventory Management System is an open-source inventory management system developed by Code-Projects. Version 1.0 of the Code-Projects Inventory Management System has a vulnerability related to injection attacks. This vulnerability stems from the handling of the Username paramet...

7.5CVSS7.2AI score0.00254EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/04/27 12:0 a.m.11 views

CodePanda Source canteen_management_system 注入漏洞

CodePanda Source canteenmanagementsystem is an open-source system developed by CodePanda Source for managing cafeteria operations and dining services. Version 1.0 of CodePanda Source canteenmanagementsystem contains a SQL injection vulnerability. This vulnerability stems from the handling of the...

7.5CVSS7.2AI score0.00254EPSS
Exploits0References2
NVD
NVD
added 2026/04/26 10:17 p.m.11 views

CVE-2026-7054

A weakness has been identified in Tenda F456 1.0.0.5. This vulnerability affects the function fromPptpUserAdd of the file /goform/PPTPDClient of the component httpd. Executing a manipulation of the argument opttype/usernamewith can lead to buffer overflow. The attack can be executed remotely. The...

9CVSS0.00655EPSS
Exploits1References5
NVD
NVD
added 2026/04/20 6:16 p.m.7 views

CVE-2026-39109

SQL Injection vulnerability in Apartment Visitors Management System Apartment Visitors Management System V1.1 within the username parameter of the login page index.php. This allows an unauthenticated attacker to manipulate backend SQL queries during authentication and retrieve sensitive database...

9.4CVSS0.00325EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/04/20 12:0 a.m.5 views

CVE-2026-39109

SQL Injection vulnerability in Apartment Visitors Management System Apartment Visitors Management System V1.1 within the username parameter of the login page index.php. This allows an unauthenticated attacker to manipulate backend SQL queries during authentication and retrieve sensitive database...

5.8AI score0.00325EPSS
Exploits0References3
CVE
CVE
added 2026/04/20 12:0 a.m.20 views

CVE-2026-39109

CVE-2026-39109 : SQL injection in the Apartment Visitors Management System V1.1, specifically in the username parameter of login (index.php). This unauthenticated vulnerability allows an attacker to manipulate backend SQL queries during authentication and retrieve sensitive database contents. Con...

9.4CVSS5.8AI score0.00325EPSS
Exploits0References3
EUVD
EUVD
added 2026/04/17 3:31 p.m.6 views

EUVD-2026-23440

A SQL injection vulnerability in CodeAstro Simple Attendance Management System v1.0 allows remote unauthenticated attackers to bypass authentication via the username parameter in index.php...

9.8CVSS5.9AI score0.00677EPSS
Exploits1References3
NVD
NVD
added 2026/04/17 3:16 p.m.10 views

CVE-2026-37749

A SQL injection vulnerability in CodeAstro Simple Attendance Management System v1.0 allows remote unauthenticated attackers to bypass authentication via the username parameter in index.php...

9.8CVSS0.00677EPSS
Exploits1References2
CNNVD
CNNVD
added 2026/04/17 12:0 a.m.9 views

CodeAstro Simple Attendance Management System 安全漏洞

CodeAstro Simple Attendance Management System is a simple attendance management system developed by CodeAstro Inc. Version 1.0 of the CodeAstro Simple Attendance Management System has a security vulnerability. This vulnerability stems from the SQL injection vulnerability in the username parameter...

9.8CVSS5.9AI score0.00677EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2026/04/17 12:0 a.m.4 views

CVE-2026-37749

A SQL injection vulnerability in CodeAstro Simple Attendance Management System v1.0 allows remote unauthenticated attackers to bypass authentication via the username parameter in index.php...

5.9AI score0.00677EPSS
Exploits1References2
Cvelist
Cvelist
added 2026/04/17 12:0 a.m.29 views

CVE-2026-37749

A SQL injection vulnerability in CodeAstro Simple Attendance Management System v1.0 allows remote unauthenticated attackers to bypass authentication via the username parameter in index.php...

0.00677EPSS
Exploits1References2
Rows per page
Query Builder