Lucene search
+L

111851 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/05 12:00 a.m.•6 views

CVE-2026-105184: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in itsourcecode Online Admission System 1.0. The impacted element is an unknown function of the file /admin/creteria.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

7.5CVSS7AI score0.00263EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/05 12:00 a.m.•6 views

CVE-2026-105185: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in itsourcecode Online Admission System 1.0. This affects an unknown function of the file /admin/examinee.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit is now public and may be used...

7.5CVSS7AI score0.00263EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/05 12:00 a.m.•8 views

PT-2026-104714

A vulnerability was detected in itsourcecode Online Admission System 1.0. This affects an unknown function of the file /admin/examinee.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit is now public and may be used...

7.5CVSS7AI score0.00263EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/10/05 12:00 a.m.•10 views

PT-2026-104783

A vulnerability was identified in itsourcecode Online Admission System 1.0. Impacted is an unknown function of the file /admin/schoolyear.php. Such manipulation of the argument sy leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be used...

6.5CVSS6.6AI score0.002EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/10/05 12:00 a.m.•11 views

PT-2026-104747

A vulnerability was determined in itsourcecode Online Admission System Project 1.0. This issue affects some unknown processing of the file /admin/login1.php. This manipulation of the argument User causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed...

7.5CVSS7AI score0.00263EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/05 12:00 a.m.•5 views

CVE-2026-105183: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in itsourcecode Online Admission System 1.0. The affected element is an unknown function of the file /admin/confirm.php. This manipulation of the argument schedid causes sql injection. It is possible to initiate the attack remotely. The exploit has been made availab...

7.5CVSS7AI score0.00263EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/05 12:00 a.m.•8 views

PT-2026-106244

A vulnerability was found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects the function mysqli query of the file Admin/mlogin.php of the component Login Handler. Performing a manipulation of the argument uname/pass results in sql...

7.5CVSS6.7AI score0.00263EPSS
SaveExploits0References7
EUVD
EUVD
•added 2026/10/05 12:00 a.m.•7 views

EUVD-2026-92467

ApiAdmin v.5.0 and before is vulnerable to SQL Injection in the user-list endpoint GET /admin/User/getUsers via the gid parameter...

5.8AI score0.00266EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/05 12:00 a.m.•6 views

CVE-2026-105188: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in code-projects Human Resource Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /views/admin/liveEventHistory.php of the component Live Event History. The manipulation of the argument eventSubject results in cross site...

5.1CVSS3.7AI score0.00199EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/05 12:00 a.m.•7 views

CVE-2026-105253: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in itsourcecode Online Admission System Project 1.0. This issue affects some unknown processing of the file /admin/login1.php. This manipulation of the argument User causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed...

7.5CVSS7AI score0.00263EPSS
SaveExploits0References3
Kitploit
Kitploit
•added 2026/10/04 11:59 p.m.•13 views

DotCMS-CVE-2022-45782

CVE-2022-45782 – dotCMS Password Reset Token Predictability PoC This repository contains a proof-of-concept exploit for CVE-2022-45782, a vulnerability in dotCMS where password-reset tokens are generated using the non-cryptographic method RandomStringUtils.randomAlphanumeric. Because this token i...

8.8CVSS8.2AI score0.00644EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/10/04 11:49 p.m.•8 views

CVE-2024-57523.

CVE-2024-57523 - Vulnerabilidad CSRF en Users.php - SourceCodester Packers and Movers Management System 1.0 Descripción Este repositorio contiene una Prueba de Concepto PoC para una vulnerabilidad de Falsificación de Solicitudes entre Sitios CSRF en el Packers and Movers Management System 1.0 de...

4.5CVSS6AI score0.00498EPSS
SaveExploits2
CVE
CVE
•added 2026/10/04 11:45 p.m.•14 views

CVE-2026-105171

A security vulnerability exists in the Role Attribute Handler component of the kishor-23 food-waste-management-system (specifically within the file admin/admin.php). The flaw is caused by improper authorization, where manipulation of the Name argument leads to an authorization bypass . This vulne...

6.5CVSS6.2AI score0.0022EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/04 11:45 p.m.•41 views

CVE-2026-105171 kishor-23 food-waste-management-system Role Attribute admin.php authorization

A security vulnerability has been detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. Affected by this vulnerability is an unknown functionality of the file admin/admin.php of the component Role Attribute Handler...

6.5CVSS0.0022EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/10/04 11:45 p.m.•7 views

CVE-2026-105171 kishor-23 food-waste-management-system Role Attribute admin.php authorization

A security vulnerability has been detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. Affected by this vulnerability is an unknown functionality of the file admin/admin.php of the component Role Attribute Handler...

6.5CVSS6.2AI score0.0022EPSS
SaveExploits0References6
OSV
OSV
•added 2026/10/04 11:45 p.m.•3 views

CVE-2026-105171 kishor-23 food-waste-management-system Role Attribute admin.php authorization

A security vulnerability has been detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. Affected by this vulnerability is an unknown functionality of the file admin/admin.php of the component Role Attribute Handler...

5.3CVSS5.4AI score
SaveExploits0References8
OSV
OSV
•added 2026/10/04 11:30 p.m.•2 views

CVE-2026-105170 kishor-23 food-waste-management-system Admin Signup signup.php missing authentication

A weakness has been identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. Affected is an unknown function of the file admin/signup.php of the component Admin Signup. This manipulation of the argument sign causes...

6.9CVSS5.4AI score
SaveExploits0References8
CVE
CVE
•added 2026/10/04 11:30 p.m.•18 views

CVE-2026-105170

A vulnerability exists in the kishor-23 food-waste-management-system within the Admin Signup component. An unknown function in the file admin/signup.php allows for missing authentication due to the manipulation of the sign argument. This flaw can be exploited remotely , and a public exploit is av...

7.5CVSS6.7AI score0.00397EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/04 11:30 p.m.•38 views

CVE-2026-105170 kishor-23 food-waste-management-system Admin Signup signup.php missing authentication

A weakness has been identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. Affected is an unknown function of the file admin/signup.php of the component Admin Signup. This manipulation of the argument sign causes...

7.5CVSS0.00397EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/10/04 11:30 p.m.•7 views

CVE-2026-105170 kishor-23 food-waste-management-system Admin Signup signup.php missing authentication

A weakness has been identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. Affected is an unknown function of the file admin/signup.php of the component Admin Signup. This manipulation of the argument sign causes...

7.5CVSS6.7AI score0.00397EPSS
SaveExploits0References6
Rows per page
Query Builder