Lucene search
+L

96 matches found

NVD
NVD
•added 2026/09/29 5:16 a.m.•12 views

CVE-2026-102264

A vulnerability was found in mwasikz robo-cafe-rms up to 228c44a02823f04e85db32b7137809a2856148fc. The impacted element is an unknown function of the file frontend/update-account.php of the component Edit Profile Feature. Performing a manipulation of the argument Name/Address/City results in cros...

5.1CVSS0.00191EPSS
SaveExploits0References4
CVE
CVE
•added 2026/09/29 4:30 a.m.•13 views

CVE-2026-102264

A cross-site scripting (XSS) vulnerability exists in the Edit Profile Feature of mwasikz robo-cafe-rms (affected up to commit 228c44a02823f04e85db32b7137809a2856148fc). The flaw is located within an unknown function in the frontend/update-account.php file, where manipulating the Name , Address , ...

5.1CVSS3.9AI score0.00191EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/09/29 4:30 a.m.•31 views

CVE-2026-102264 mwasikz robo-cafe-rms Edit Profile Feature update-account.php cross site scripting

A vulnerability was found in mwasikz robo-cafe-rms up to 228c44a02823f04e85db32b7137809a2856148fc. The impacted element is an unknown function of the file frontend/update-account.php of the component Edit Profile Feature. Performing a manipulation of the argument Name/Address/City results in cros...

5.1CVSS0.00191EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/29 4:30 a.m.•8 views

EUVD-2026-88640

A vulnerability was found in mwasikz robo-cafe-rms up to 228c44a02823f04e85db32b7137809a2856148fc. The impacted element is an unknown function of the file frontend/update-account.php of the component Edit Profile Feature. Performing a manipulation of the argument Name/Address/City results in cros...

5.1CVSS3.9AI score0.00191EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/29 12:00 a.m.•8 views

CVE-2026-102264: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in mwasikz robo-cafe-rms up to 228c44a02823f04e85db32b7137809a2856148fc. The impacted element is an unknown function of the file frontend/update-account.php of the component Edit Profile Feature. Performing a manipulation of the argument Name/Address/City results in cros...

5.1CVSS4.1AI score0.00191EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/29 12:00 a.m.•4 views

PT-2026-102450

Name of the Vulnerable Software and Affected Versions mwasikz robo-cafe-rms versions up to 228c44a02823f04e85db32b7137809a2856148fc Description A cross site scripting issue exists within the Edit Profile Feature in the file frontend/update-account.php. Remote exploitation is possible by...

5.1CVSS5AI score0.00191EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/19 12:00 a.m.•1 views

CVE-2026-16220: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in code-projects Online Examination System 1.0. This vulnerability affects unknown code of the file /account.php?q=quiz. Such manipulation of the argument eid/n/t leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to t...

5.3CVSS3.7AI score0.0047EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2007-5955

Malware in sbrugna...

4.3CVSS6.4AI score0.01707EPSS
SaveExploits0References16
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2008-1233

Malware in sbrugna...

4.3CVSS6.4AI score0.01022EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2021-32996

Malicious code in bioql PyPI...

10CVSS9.4AI score0.01556EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•10 views

EUVD-2024-48788

Malicious code in bioql PyPI...

5.4CVSS4.8AI score0.00447EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2025/09/15 12:00 a.m.•13 views

PT-2025-37442

Name of the Vulnerable Software and Affected Versions: SourceCodester Student Grading System version 1.0 Description: A flaw exists in the SourceCodester Student Grading System that may allow for SQL injection. The issue affects unknown code within the /update account.php file. Manipulation of th...

8.8CVSS6.5AI score0.00389EPSS
SaveExploits1References9
CNVD
CNVD
•added 2025/05/22 12:00 a.m.•79 views

CampCodes Online Shopping Portal /my-account.php File SQL Injection Vulnerability

CampCodes Online Shopping Portal is an online shopping portal from CampCodes, Inc. CampCodes Online Shopping Portal suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter Name in the file /my-account.php. An attacker...

9.8CVSS8.1AI score0.00507EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/05/19 12:00 a.m.•17 views

PT-2025-21934 · Unknown · Campcodes Online Shopping Portal

Name of the Vulnerable Software and Affected Versions: Campcodes Online Shopping Portal version 1.0 Description: A critical issue affects some unknown processing of the file /my-account.php. The manipulation of the argument Name leads to SQL injection. The attack may be initiated remotely. The...

9.8CVSS7.5AI score0.00507EPSS
SaveExploits1References13
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/19 12:00 a.m.•4 views

CVE-2025-4929: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Online Shopping Portal 1.0. It has been rated as critical. This issue affects some unknown processing of the file /my-account.php. The manipulation of the argument Name leads to sql injection. The attack may be initiated remotely. The exploit has been...

9.8CVSS7AI score0.00507EPSS
SaveExploits1References1
CVE
CVE
•added 2024/12/26 9:31 a.m.•64 views

CVE-2024-12945

CVE-2024-12945 affects Code-Projects Simple Car Rental System 1.0. The vulnerability is in the /account.php file, where manipulation of the email/pass parameter leads to SQL injection. The issue is exploitable remotely and has been publicly disclosed. Connected documentation corroborates a critic...

9.8CVSS7.6AI score0.00683EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2024/12/26 9:31 a.m.•49 views

CVE-2024-12945 code-projects Simple Car Rental System account.php sql injection

A vulnerability classified as critical was found in code-projects Simple Car Rental System 1.0. This vulnerability affects unknown code of the file /account.php. The manipulation of the argument email/pass leads to sql injection. The attack can be initiated remotely. The exploit has been disclose...

7.5CVSS0.00683EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/26 12:00 a.m.•5 views

CVE-2024-12945: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in code-projects Simple Car Rental System 1.0. This vulnerability affects unknown code of the file /account.php. The manipulation of the argument email/pass leads to sql injection. The attack can be initiated remotely. The exploit has been disclose...

9.8CVSS5.5AI score0.00683EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/12/22 6:31 a.m.•15 views

CVE-2024-12891 code-projects Online Exam Mastering System account.php sql injection

A vulnerability classified as critical has been found in code-projects Online Exam Mastering System 1.0. Affected is an unknown function of the file /account.php?q=quiz&step=2. The manipulation of the argument eid leads to sql injection. It is possible to launch the attack remotely. The exploit h...

6.5CVSS7.4AI score0.00545EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2024/12/22 6:31 a.m.•36 views

CVE-2024-12891 code-projects Online Exam Mastering System account.php sql injection

A vulnerability classified as critical has been found in code-projects Online Exam Mastering System 1.0. Affected is an unknown function of the file /account.php?q=quiz&step=2. The manipulation of the argument eid leads to sql injection. It is possible to launch the attack remotely. The exploit h...

6.5CVSS0.00545EPSS
SaveExploits1References5
Rows per page
Query Builder