CVE-2026-86268

A vulnerability was detected in itsourcecode School Management System 1.0. Impacted is an unknown function of the file UserLogin.php. The manipulation of the argument email results in sql injection. The attack can be executed remotely. The exploit is now public and may be used...

CVE-2026-86268

A SQL injection vulnerability exists in itsourcecode School Management System 1.0 , specifically in the file User_Login.php where manipulation of the email argument allows a remote attacker to inject SQL queries without authentication. The vulnerability is rated HIGH (CVSS 3.1: 7.3) with low impa...

EUVD-2024-55091

Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the useremail parameter in userlogin.php...

CVE-2024-44653

Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the useremail parameter in userlogin.php...

EUVD-2018-2047

Malware in sbrugna...

EUVD-2009-3494

Malware in sbrugna...

CVE-2018-1000868

WeBid version up to current version 1.2.2 contains a Cross Site Scripting XSS vulnerability in userlogin.php, register.php that can result in Javascript execution in the user's browser, injection of malicious markup into the page. This attack appear to be exploitable via The victim user must clic...

Cross site scripting

WeBid version up to current version 1.2.2 contains a Cross Site Scripting XSS vulnerability in userlogin.php, register.php that can result in Javascript execution in the user's browser, injection of malicious markup into the page. This attack appear to be exploitable via The victim user must clic...

CVE-2018-1000868

WeBid up to version 1.2.2 is affected by a Cross-Site Scripting (XSS) vulnerability in user_login.php and register.php. The issue allows execution of JavaScript in a user’s browser when a victim user clicks a malicious link, via injected markup on the affected pages. The vulnerability is fixed af...

makeoffer.com XSS vulnerability

Open Bug Bounty ID: OBB-577190 Description| Value ---|--- Affected Website:| makeoffer.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in MyWeight 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 date parameter to useraddfood.php, info parameter to 2 userforgotpwdform.php and 3 userlogin.php, and 4 return parameter to userlogin.php...

CVE-2009-3512

Multiple cross-site scripting XSS vulnerabilities in MyWeight 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 date parameter to useraddfood.php, info parameter to 2 userforgotpwdform.php and 3 userlogin.php, and 4 return parameter to userlogin.php...