Lucene search
K

47 matches found

RedhatCVE
RedhatCVE
added 2026/02/24 1:44 a.m.3 views

CVE-2026-26464

Stored Cross-Site Scripting XSS was found in the /admin/edituser.php page of Society Management System Portal V1.0, which allows remote attackers to inject and store arbitrary JavaScript code that is executed in users' browsers. This vulnerability can be exploited via the name parameter in a POST...

6.1CVSS6.1AI score0.00088EPSS
Exploits1References1
OSV
OSV
added 2026/02/23 6:25 p.m.1 views

CVE-2026-26464

Stored Cross-Site Scripting XSS was found in the /admin/edituser.php page of Society Management System Portal V1.0, which allows remote attackers to inject and store arbitrary JavaScript code that is executed in users' browsers. This vulnerability can be exploited via the name parameter in a POST...

6.1CVSS6.1AI score
Exploits0References1
NVD
NVD
added 2026/02/23 6:25 p.m.1 views

CVE-2026-26464

Stored Cross-Site Scripting XSS was found in the /admin/edituser.php page of Society Management System Portal V1.0, which allows remote attackers to inject and store arbitrary JavaScript code that is executed in users' browsers. This vulnerability can be exploited via the name parameter in a POST...

6.1CVSS0.00088EPSS
Exploits1References1
CNNVD
CNNVD
added 2026/02/23 12:0 a.m.4 views

Kashipara Society Management System Portal 安全漏洞

Kashipara Society Management System Portal is a community/property management system developed by Kashipara Corporation. Version 1.0 of the Kashipara Society Management System Portal contains a security vulnerability. This vulnerability stems from a stored-xss attack in the/admin/edituser.php pag...

6.1CVSS5.8AI score0.00088EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/01/29 9:21 p.m.3 views

CVE-2026-1534

A weakness has been identified in code-projects Online Music Site 1.0. This affects an unknown function of the file /Administrator/PHP/AdminEditUser.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available ...

9.8CVSS5.8AI score0.00018EPSS
Exploits1References1
NVD
NVD
added 2026/01/28 9:16 p.m.2 views

CVE-2026-1534

A weakness has been identified in code-projects Online Music Site 1.0. This affects an unknown function of the file /Administrator/PHP/AdminEditUser.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available ...

9.8CVSS0.00018EPSS
Exploits1References5
EUVD
EUVD
added 2026/01/28 9:2 p.m.4 views

EUVD-2026-4857

A weakness has been identified in code-projects Online Music Site 1.0. This affects an unknown function of the file /Administrator/PHP/AdminEditUser.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available ...

7.5CVSS5.8AI score0.00018EPSS
Exploits1References5
ATTACKERKB
ATTACKERKB
added 2026/01/28 9:2 p.m.3 views

CVE-2026-1534

A weakness has been identified in code-projects Online Music Site 1.0. This affects an unknown function of the file /Administrator/PHP/AdminEditUser.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available ...

7.5CVSS5.8AI score0.00018EPSS
Exploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2026/01/28 9:2 p.m.3 views

CVE-2026-1534 code-projects Online Music Site AdminEditUser.php sql injection

A weakness has been identified in code-projects Online Music Site 1.0. This affects an unknown function of the file /Administrator/PHP/AdminEditUser.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available ...

7.5CVSS5.8AI score0.00018EPSS
Exploits1References5
CVE
CVE
added 2026/01/28 9:2 p.m.5 views

CVE-2026-1534

The CVE-2026-1534 affects code-projects Online Music Site 1.0, specifically the file /Administrator/PHP/AdminEditUser.php. The vulnerability arises from manipulation of the ID argument, enabling SQL injection that can be exploited remotely, with public exploits available. Multiple sources (NVD, R...

9.8CVSS5.8AI score0.00018EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2026/01/28 9:2 p.m.21 views

CVE-2026-1534 code-projects Online Music Site AdminEditUser.php sql injection

A weakness has been identified in code-projects Online Music Site 1.0. This affects an unknown function of the file /Administrator/PHP/AdminEditUser.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available ...

7.5CVSS0.00018EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2026/01/28 12:0 a.m.3 views

PT-2026-5224

Name of the Vulnerable Software and Affected Versions code-projects Online Music Site version 1.0 Description A flaw exists in code-projects Online Music Site 1.0. The issue involves the manipulation of the ID argument, leading to SQL injection. This can be exploited remotely through a file locat...

7.5CVSS5.8AI score0.00018EPSS
Exploits1References8
CNNVD
CNNVD
added 2026/01/28 12:0 a.m.2 views

Code-Projects Online Music Site SQL Injection Vulnerability

Code-Projects Online Music Site is an online music website developed by Code-Projects as open source. Version 1.0 of Code-Projects Online Music Site has a SQL injection vulnerability. This vulnerability stems from incorrect handling of parameters related to files, administrators, and the...

9.8CVSS7.2AI score0.00018EPSS
Exploits1References6
RedhatCVE
RedhatCVE
added 2026/01/01 3:32 p.m.2 views

CVE-2025-15390

A security flaw has been discovered in PHPGurukul Small CRM 4.0. This impacts an unknown function of the file /admin/edit-user.php. The manipulation results in missing authorization. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for...

8.8CVSS6.2AI score0.00011EPSS
Exploits1References1
OSV
OSV
added 2025/12/31 4:15 p.m.0 views

CVE-2025-15390

A security flaw has been discovered in PHPGurukul Small CRM 4.0. This impacts an unknown function of the file /admin/edit-user.php. The manipulation results in missing authorization. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for...

8.8CVSS5.5AI score0.00011EPSS
Exploits1References5
NVD
NVD
added 2025/12/31 4:15 p.m.2 views

CVE-2025-15390

A security flaw has been discovered in PHPGurukul Small CRM 4.0. This impacts an unknown function of the file /admin/edit-user.php. The manipulation results in missing authorization. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for...

8.8CVSS0.00011EPSS
Exploits1References5
EUVD
EUVD
added 2025/12/31 3:32 p.m.2 views

EUVD-2025-206030

A security flaw has been discovered in PHPGurukul Small CRM 4.0. This impacts an unknown function of the file /admin/edit-user.php. The manipulation results in missing authorization. It is possible to launch the attack remotely. The exploit has been released to the public and may be exploited...

6.5CVSS6.2AI score0.00011EPSS
Exploits1References7
Vulnrichment
Vulnrichment
added 2025/12/31 3:32 p.m.1 views

CVE-2025-15390 PHPGurukul Small CRM edit-user.php authorization

A security flaw has been discovered in PHPGurukul Small CRM 4.0. This impacts an unknown function of the file /admin/edit-user.php. The manipulation results in missing authorization. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for...

6.5CVSS6.2AI score0.00011EPSS
Exploits1References5
ATTACKERKB
ATTACKERKB
added 2025/12/31 3:32 p.m.2 views

CVE-2025-15390

A security flaw has been discovered in PHPGurukul Small CRM 4.0. This impacts an unknown function of the file /admin/edit-user.php. The manipulation results in missing authorization. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for...

8.8CVSS5.2AI score0.00011EPSS
Exploits1References5Affected Software1
CNNVD
CNNVD
added 2025/12/31 12:0 a.m.2 views

PHPGurukul Small CRM 安全漏洞

PHPGurukul Small CRM is a customer relationship management system from PHPGurukul. A security vulnerability exists in PHPGurukul Small CRM version 4.0, which stems from a missing authorization in the file /admin/edit-user.php, which could lead to a remote attack...

8.8CVSS6.5AI score0.00011EPSS
Exploits1References5
Rows per page
Query Builder