Lucene search
+L

240 matches found

CNNVD
CNNVD
added 2026/04/06 12:00 a.m.17 views

PHPGurukul Online Shopping Portal Project SQL注入漏洞

The PHPGurukul Online Shopping Portal Project is an online shopping portal project developed by PHPGurukul Corporation. Version 2.1 of the PHPGurukul Online Shopping Portal Project contains a SQL injection vulnerability. This vulnerability arises from incorrect handling of the parameter filename ...

6.5CVSS6.7AI score0.00196EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2026/04/06 12:00 a.m.12 views

PHPGurukul Online Shopping Portal Project SQL注入漏洞

The PHPGurukul Online Shopping Portal Project is an online shopping portal project of PHPGurukul Corporation. Version 2.1 of the PHPGurukul Online Shopping Portal Project has a SQL injection vulnerability. This vulnerability arises from incorrect handling of the parameter filename in the file...

6.5CVSS6.6AI score0.00246EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2026/04/06 12:00 a.m.14 views

PHPGurukul Online Shopping Portal Project SQL注入漏洞

The PHPGurukul Online Shopping Portal Project is an online shopping portal project developed by PHPGurukul Corporation. Version 2.1 of the PHPGurukul Online Shopping Portal Project contains a SQL injection vulnerability. This vulnerability arises from incorrect handling of the parameter filename ...

6.5CVSS6.7AI score0.00192EPSS
SaveExploits0References5
Snyk
Snyk
added 2026/04/03 11:43 p.m.4 views

Cross-site Request Forgery (CSRF)

Overview wwbn/avideo is an Audio and Video Platform or simply "A Video Platform". Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF via the admin/playerUpdate.json.php process. An attacker can modify the video player appearance across the platform by tricking an...

5.3CVSS5.8AI score0.00134EPSS
SaveExploits1References2
NVD
NVD
added 2026/04/01 3:15 a.m.14 views

CVE-2026-5251

A vulnerability was identified in z-9527 admin 1.0/2.0. This impacts an unknown function of the file /server/routes/user.js of the component User Update Endpoint. Such manipulation of the argument isAdmin with the input 1 leads to dynamically-determined object attributes. It is possible to launch...

6.5CVSS0.00242EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/03/30 4:00 a.m.45 views

CVE-2026-5106 code-projects Exam Form Submission update_fst.php cross site scripting

A flaw has been found in code-projects Exam Form Submission 1.0. The impacted element is an unknown function of the file /admin/updatefst.php. Executing a manipulation of the argument sname can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been...

4.8CVSS0.00191EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2026/03/30 4:00 a.m.4 views

CVE-2026-5106 code-projects Exam Form Submission update_fst.php cross site scripting

A flaw has been found in code-projects Exam Form Submission 1.0. The impacted element is an unknown function of the file /admin/updatefst.php. Executing a manipulation of the argument sname can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been...

4.8CVSS4.2AI score0.00191EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2026/03/30 12:00 a.m.20 views

Code-Projects Exam Form Submission 代码注入漏洞

Code-Projects Exam Form Submission is an open-source exam form developed by Code-Projects. Version 1.0 of Code-Projects Exam Form Submission contains a code injection vulnerability. This vulnerability arises from incorrect handling of the parameter sname in the file admin/updatefst.php, which may...

4.8CVSS5.7AI score0.00191EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/03/30 12:00 a.m.12 views

PT-2026-28760

A flaw has been found in code-projects Exam Form Submission 1.0. The impacted element is an unknown function of the file /admin/update fst.php. Executing a manipulation of the argument sname can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been...

4.8CVSS4.2AI score0.00191EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2026/03/28 4:56 a.m.8 views

CVE-2026-4909

A weakness has been identified in code-projects Exam Form Submission 1.0. This impacts an unknown function of the file /admin/updates7.php. This manipulation of the argument sname causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been made available to t...

4.8CVSS4.4AI score0.00289EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/03/27 2:25 a.m.5 views

CVE-2026-4909 code-projects Exam Form Submission update_s7.php cross site scripting

A weakness has been identified in code-projects Exam Form Submission 1.0. This impacts an unknown function of the file /admin/updates7.php. This manipulation of the argument sname causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been made available to t...

4.8CVSS4.4AI score0.00289EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/03/27 2:25 a.m.16 views

CVE-2026-4909

A weakness has been identified in code-projects Exam Form Submission 1.0. This impacts an unknown function of the file /admin/updates7.php. This manipulation of the argument sname causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been made available to t...

4.8CVSS4.4AI score0.00289EPSS
SaveExploits0References5Affected Software1
EUVD
EUVD
added 2026/03/27 2:25 a.m.8 views

EUVD-2026-16529

A weakness has been identified in code-projects Exam Form Submission 1.0/7.php. This impacts an unknown function of the file /admin/updates7.php. This manipulation of the argument sname causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been made availabl...

4.8CVSS4.3AI score0.00289EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2026/03/27 12:00 a.m.17 views

Code-Projects Exam Form Submission 安全漏洞

Code-Projects Exam Form Submission is an open-source exam form developed by Code-Projects. Version 1.0 of Code-Projects Exam Form Submission contains a security vulnerability. This vulnerability stems from improper handling of the parameter sname in the file admin/updates7.php, which may lead to...

4.8CVSS5.6AI score0.00289EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/03/27 12:00 a.m.14 views

PT-2026-28672

Name of the Vulnerable Software and Affected Versions code-projects Exam Form Submission version 1.0 Description A cross-site scripting issue exists due to the manipulation of the sname argument in the file '/admin/update s7.php'. The issue impacts an unknown function. The exploit has been public...

4.8CVSS5.6AI score0.00289EPSS
SaveExploits0References9
RedhatCVE
RedhatCVE
added 2026/03/26 3:16 p.m.10 views

CVE-2026-4557

A vulnerability was detected in code-projects Exam Form Submission 1.0. This impacts an unknown function of the file /admin/updates1.php. Performing a manipulation of the argument sname results in cross site scripting. The attack may be initiated remotely. The exploit is now public and may be use...

5.3CVSS4.3AI score0.00265EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/03/26 3:15 p.m.9 views

CVE-2026-4474

A flaw has been found in itsourcecode University Management System 1.0. Impacted is an unknown function of the file /adminsinglestudentupdate.php. This manipulation of the argument stname causes cross site scripting. The attack may be initiated remotely. The exploit has been published and may be...

6.1CVSS4.2AI score0.00271EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/03/26 3:15 p.m.10 views

CVE-2026-4577

A vulnerability was found in code-projects Exam Form Submission 1.0. The affected element is an unknown function of the file /admin/updates4.php. Performing a manipulation of the argument sname results in cross site scripting. The attack may be initiated remotely. The exploit has been made public...

4.8CVSS4.2AI score0.00206EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/03/26 3:15 p.m.7 views

CVE-2026-4595

A vulnerability was determined in code-projects Exam Form Submission 1.0. This vulnerability affects unknown code of the file /admin/updates6.php. Executing a manipulation of the argument sname can lead to cross site scripting. The attack can be launched remotely. The exploit has been publicly...

4.8CVSS4AI score0.00206EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/03/23 9:30 p.m.12 views

EUVD-2026-14510

A vulnerability was determined in code-projects Exam Form Submission 1.0. This vulnerability affects unknown code of the file /admin/updates6.php. Executing a manipulation of the argument sname can lead to cross site scripting. The attack can be launched remotely. The exploit has been publicly...

4.8CVSS4.1AI score0.00206EPSS
SaveExploits0References6
Rows per page
Query Builder