Lucene search
+L

435 matches found

Cvelist
Cvelist
added 2026/01/27 12:0 a.m.27 views

CVE-2025-69559

code-projects Computer Book Store 1.0 is vulnerable to File Upload in adminadd.php...

0.005EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2026/01/27 12:0 a.m.9 views

PT-2026-4965

code-projects Computer Book Store 1.0 is vulnerable to File Upload in admin add.php...

5.9AI score0.005EPSS
SaveExploits1References3
CVE
CVE
added 2026/01/27 12:0 a.m.16 views

CVE-2025-69559

The CVE-2025-69559 entry concerns code-projects Computer Book Store 1.0, with a File Upload vulnerability in admin_add.php. Multiple connected sources corroborate this issue, including Red Hat, NVD, CVE List, and others. The available data identify the affected software/component as the admin_add...

9.8CVSS5.9AI score0.005EPSS
SaveExploits1References2Affected Software1
NVD
NVD
added 2026/01/18 11:15 a.m.7 views

CVE-2026-1118

A vulnerability was detected in itsourcecode Society Management System 1.0. Impacted is an unknown function of the file /admin/addactivity.php. Performing a manipulation of the argument Title results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and m...

9.8CVSS0.00323EPSS
SaveExploits1References5
ATTACKERKB
ATTACKERKB
added 2026/01/18 10:32 a.m.5 views

CVE-2026-1118

A vulnerability was detected in itsourcecode Society Management System 1.0. Impacted is an unknown function of the file /admin/addactivity.php. Performing a manipulation of the argument Title results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and m...

9.8CVSS5.4AI score0.00323EPSS
SaveExploits1References5Affected Software1
CNNVD
CNNVD
added 2026/01/18 12:0 a.m.8 views

Itsourcecode Society Management System SQL Injection Vulnerability

itsourcecode Society Management System is an open-source social management system developed by itsourcecode. Version 1.0 of the itsourcecode Society Management System has a SQL injection vulnerability. This vulnerability arises from incorrect handling of the parameter “Title” in the file...

9.8CVSS5.8AI score0.00323EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2026/01/18 12:0 a.m.10 views

PT-2026-3386

Name of the Vulnerable Software and Affected Versions itsourcecode Society Management System version 1.0 Description A SQL injection issue exists in itsourcecode Society Management System 1.0. The issue is located in the file /admin/add activity.php. Manipulating the Title argument can lead to SQ...

9.8CVSS6.5AI score0.00323EPSS
SaveExploits1References9
RedhatCVE
RedhatCVE
added 2026/01/13 10:52 p.m.8 views

CVE-2026-0851

A vulnerability was identified in code-projects Online Music Site 1.0. The affected element is an unknown function of the file /Administrator/PHP/AdminAddUser.php. The manipulation of the argument txtusername leads to sql injection. Remote exploitation of the attack is possible. The exploit is...

9.8CVSS7AI score0.00319EPSS
SaveExploits1References1
NVD
NVD
added 2026/01/12 12:15 a.m.5 views

CVE-2026-0851

A vulnerability was identified in code-projects Online Music Site 1.0. The affected element is an unknown function of the file /Administrator/PHP/AdminAddUser.php. The manipulation of the argument txtusername leads to sql injection. Remote exploitation of the attack is possible. The exploit is...

9.8CVSS0.00319EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2026/01/11 11:32 p.m.4 views

CVE-2026-0851 code-projects Online Music Site AdminAddUser.php sql injection

A vulnerability was identified in code-projects Online Music Site 1.0. The affected element is an unknown function of the file /Administrator/PHP/AdminAddUser.php. The manipulation of the argument txtusername leads to sql injection. Remote exploitation of the attack is possible. The exploit is...

7.5CVSS6.7AI score0.00319EPSS
SaveExploits1References5
CVE
CVE
added 2026/01/11 11:32 p.m.16 views

CVE-2026-0851

Code-projects Online Music Site 1.0 contains an SQL injection in /Administrator/PHP/AdminAddUser.php via the txtusername parameter. The vulnerability allows remote exploitation and is supported by a publicly available exploit. The issue is tied to an unknown function in AdminAddUser.php and is co...

9.8CVSS7.1AI score0.00319EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2026/01/11 11:32 p.m.34 views

CVE-2026-0851 code-projects Online Music Site AdminAddUser.php sql injection

A vulnerability was identified in code-projects Online Music Site 1.0. The affected element is an unknown function of the file /Administrator/PHP/AdminAddUser.php. The manipulation of the argument txtusername leads to sql injection. Remote exploitation of the attack is possible. The exploit is...

7.5CVSS0.00319EPSS
SaveExploits1References5
EUVD
EUVD
added 2026/01/11 11:32 p.m.6 views

EUVD-2026-1959

A vulnerability was identified in code-projects Online Music Site 1.0. The affected element is an unknown function of the file /Administrator/PHP/AdminAddUser.php. The manipulation of the argument txtusername leads to sql injection. Remote exploitation of the attack is possible. The exploit is...

7.5CVSS6.5AI score0.00319EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2026/01/11 12:0 a.m.6 views

PT-2026-2041

Name of the Vulnerable Software and Affected Versions code-projects Online Music Site version 1.0 Description A flaw exists in code-projects Online Music Site 1.0 that allows for SQL injection. The issue is located in an unknown function within the /Administrator/PHP/AdminAddUser.php file...

9.8CVSS7.5AI score0.00319EPSS
SaveExploits1References12
RedhatCVE
RedhatCVE
added 2026/01/09 9:53 a.m.10 views

CVE-2020-10484

CSRF in admin/add-field.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to create a custom field via a crafted request...

4.3CVSS6.8AI score0.00475EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/01/09 9:52 a.m.8 views

CVE-2020-10398

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/add-template.php by adding a question mark ? followed by the payload...

4.8CVSS6.1AI score0.00733EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/01/09 9:52 a.m.9 views

CVE-2020-10395

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/add-group.php by adding a question mark ? followed by the payload...

4.8CVSS6.1AI score0.00611EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/12/30 5:9 p.m.6 views

CVE-2025-15195

A vulnerability was determined in code-projects Assessment Management 1.0. Affected by this issue is some unknown functionality of the file /admin/add-module.php. This manipulation of the argument linked causes sql injection. The attack can be initiated remotely. The exploit has been publicly...

9.8CVSS7.1AI score0.00385EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2025/12/29 9:32 p.m.37 views

CVE-2025-15206 Campcodes Supplier Management System add_area.php sql injection

A flaw has been found in Campcodes Supplier Management System 1.0. This impacts an unknown function of the file /admin/addarea.php. Executing a manipulation of the argument txtAreaCode can lead to sql injection. The attack may be performed from remote. The exploit has been published and may be us...

7.5CVSS0.00434EPSS
SaveExploits1References5
ATTACKERKB
ATTACKERKB
added 2025/12/29 9:32 p.m.7 views

CVE-2025-15206

A flaw has been found in Campcodes Supplier Management System 1.0. This impacts an unknown function of the file /admin/addarea.php. Executing a manipulation of the argument txtAreaCode can lead to sql injection. The attack may be performed from remote. The exploit has been published and may be us...

9.8CVSS5.3AI score0.00434EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder