Lucene search
+L

57 matches found

NVD
NVD
•added 2026/10/21 1:18 p.m.•9 views

CVE-2026-114245

A weakness has been identified in dhikshitha29 Insurance-Management-System 91de5edda5baa109ad8e9baf03ce6a3ceda84183/125362cc21dca20d74091a4913a5096bb58dd837. Affected by this issue is some unknown functionality of the file /Admin/includes/Admin-Register-inc.php of the component Add New Admin Form...

7.5CVSS0.00377EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/21 12:45 p.m.•24 views

CVE-2026-114245 dhikshitha29 Insurance-Management-System Add New Admin Form Admin-Register-inc.php improper authorization

A weakness has been identified in dhikshitha29 Insurance-Management-System 91de5edda5baa109ad8e9baf03ce6a3ceda84183/125362cc21dca20d74091a4913a5096bb58dd837. Affected by this issue is some unknown functionality of the file /Admin/includes/Admin-Register-inc.php of the component Add New Admin Form...

7.5CVSS0.00377EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/10/21 12:45 p.m.•9 views

CVE-2026-114245 dhikshitha29 Insurance-Management-System Add New Admin Form Admin-Register-inc.php improper authorization

A weakness has been identified in dhikshitha29 Insurance-Management-System 91de5edda5baa109ad8e9baf03ce6a3ceda84183/125362cc21dca20d74091a4913a5096bb58dd837. Affected by this issue is some unknown functionality of the file /Admin/includes/Admin-Register-inc.php of the component Add New Admin Form...

7.5CVSS6.8AI score0.00377EPSS
SaveExploits0References6
CVE
CVE
•added 2026/10/21 12:45 p.m.•16 views

CVE-2026-114245

A vulnerability exists in the dhikshitha29 Insurance-Management-System within the Add New Admin Form component. Specifically, an improper authorization flaw in the /Admin/includes/Admin-Register-inc.php file allows for remote exploitation. An attacker can manipulate the submit/Admin_id/password a...

7.5CVSS6.8AI score0.00377EPSS
SaveExploits0References6
osv_cve
osv_cve
•added 2026/10/21 12:45 p.m.•10 views

CVE-2026-114245 dhikshitha29 Insurance-Management-System Add New Admin Form Admin-Register-inc.php improper authorization

A weakness has been identified in dhikshitha29 Insurance-Management-System 91de5edda5baa109ad8e9baf03ce6a3ceda84183/125362cc21dca20d74091a4913a5096bb58dd837. Affected by this issue is some unknown functionality of the file /Admin/includes/Admin-Register-inc.php of the component Add New Admin Form...

6.9CVSS5.4AI score
SaveExploits0References8
EUVD
EUVD
•added 2026/10/21 12:45 p.m.•11 views

EUVD-2026-107253

A weakness has been identified in dhikshitha29 Insurance-Management-System 91de5edda5baa109ad8e9baf03ce6a3ceda84183/125362cc21dca20d74091a4913a5096bb58dd837. Affected by this issue is some unknown functionality of the file /Admin/includes/Admin-Register-inc.php of the component Add New Admin Form...

7.5CVSS6.8AI score0.00377EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/18 12:00 a.m.•13 views

CVE-2026-49226: Authorization Bypass Through User-Controlled Key

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.4, Vvveb backend post operations allow a low-privileged Author to access posts owned by another Author. The admin/controller/content/posts.php controller permits filteradminid to...

8.3CVSS5.9AI score0.0048EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/15 12:00 a.m.•7 views

CVE-2026-46407: Authorization Bypass Through User-Controlled Key

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.3, the backend admin/auth-token endpoint allows an authenticated administrator to load another administrator's REST API token list by supplying that user's adminid. This can...

8.1CVSS5.9AI score0.00218EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/02/07 10:02 p.m.•12 views

CVE-2026-2114 itsourcecode Society Management System edit_admin.php sql injection

A vulnerability was detected in itsourcecode Society Management System 1.0. This vulnerability affects unknown code of the file /admin/editadmin.php. The manipulation of the argument adminid results in sql injection. The attack may be performed from remote. The exploit is now public and may be us...

7.5CVSS7.1AI score0.00429EPSS
SaveExploits1References5
CVE
CVE
•added 2026/02/07 10:02 p.m.•61 views

CVE-2026-2114

The CVE-2026-2114 entry affects itsourcecode Society Management System 1.0. The vulnerability resides in the /admin/edit_admin.php code path, where manipulation of the admin_id parameter leads to SQL injection. Attacks can be performed remotely, and public exploits exist. Multiple connected sourc...

9.8CVSS7.1AI score0.00429EPSS
SaveExploits1References5Affected Software1
CNNVD
CNNVD
•added 2026/02/07 12:00 a.m.•32 views

Itsourcecode Society Management System SQL Injection Vulnerability

itsourcecode Society Management System is an open-source social management system developed by itsourcecode. Version 1.0 of the itsourcecode Society Management System has a SQL injection vulnerability. This vulnerability arises from incorrect handling of the adminid parameter in the...

9.8CVSS7.1AI score0.00429EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/07 12:00 a.m.•5 views

CVE-2026-2114: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in itsourcecode Society Management System 1.0. This vulnerability affects unknown code of the file /admin/editadmin.php. The manipulation of the argument adminid results in sql injection. The attack may be performed from remote. The exploit is now public and may be us...

9.8CVSS7.2AI score0.00429EPSS
SaveExploits1References1
NVD
NVD
•added 2026/01/08 9:15 p.m.•46 views

CVE-2026-0728

A security vulnerability has been detected in code-projects Intern Membership Management System 1.0. This issue affects some unknown processing of the file /intern/admin/deleteadmin.php. Such manipulation of the argument adminid leads to sql injection. The attack may be launched remotely. The...

7.2CVSS0.00423EPSS
SaveExploits1References5
EUVD
EUVD
•added 2026/01/08 5:32 a.m.•24 views

EUVD-2026-1589

A vulnerability has been found in code-projects Intern Membership Management System 1.0. This affects an unknown function of the file /intern/admin/editstudents.php. Such manipulation of the argument adminid leads to sql injection. The attack may be launched remotely. The exploit has been disclos...

7.2CVSS5.2AI score0.00401EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/08 12:00 a.m.•7 views

CVE-2026-0728: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in code-projects Intern Membership Management System 1.0. This issue affects some unknown processing of the file /intern/admin/deleteadmin.php. Such manipulation of the argument adminid leads to sql injection. The attack may be launched remotely. The...

7.2CVSS5.3AI score0.00423EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/08 12:00 a.m.•7 views

CVE-2026-0697: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in code-projects Intern Membership Management System 1.0. The impacted element is an unknown function of the file /intern/admin/editadmin.php. This manipulation of the argument adminid causes sql injection. The attack may be initiated remotely. The exploit has been published...

7.2CVSS5.2AI score0.00364EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/08 12:00 a.m.•8 views

CVE-2026-0698: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in code-projects Intern Membership Management System 1.0. This affects an unknown function of the file /intern/admin/editstudents.php. Such manipulation of the argument adminid leads to sql injection. The attack may be launched remotely. The exploit has been disclos...

7.2CVSS5.2AI score0.00401EPSS
SaveExploits1References1
CVE
CVE
•added 2025/12/12 6:32 p.m.•42 views

CVE-2025-14570

CVE-2025-14570 affects projectworlds Advanced Library Management System 1.0. The vulnerability is in the file routes involving the parameter that controls the admin ID (notably /view_admin.php or /view admin.php in variants) where improper handling/manipulation of the admin_id parameter enables S...

9.8CVSS7.1AI score0.00427EPSS
SaveExploits1References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/12 12:00 a.m.•8 views

CVE-2025-14570: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in projectworlds Advanced Library Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /viewadmin.php. This manipulation of the argument adminid causes sql injection. The attack may be initiated remotely. The exploit has been publishe...

9.8CVSS7.1AI score0.00427EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/12/12 12:00 a.m.•19 views

ProjectWorlds Advanced Library Management System SQL Injection Vulnerability

Projectworlds Advanced Library Management System is an advanced library management system from Projectworlds India. A SQL injection vulnerability exists in projectworlds Advanced Library Management System version 1.0, which stems from incorrect manipulation of the parameter adminid in the file...

9.8CVSS7.1AI score0.00427EPSS
SaveExploits1References4
Rows per page
Query Builder