Lucene search
K

25 matches found

CVE
CVE
added 2026/02/07 10:2 p.m.10 views

CVE-2026-2114

The CVE-2026-2114 entry affects itsourcecode Society Management System 1.0. The vulnerability resides in the /admin/edit_admin.php code path, where manipulation of the admin_id parameter leads to SQL injection. Attacks can be performed remotely, and public exploits exist. Multiple connected sourc...

9.8CVSS7.2AI score0.00013EPSS
Exploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2026/02/07 10:2 p.m.1 views

CVE-2026-2114 itsourcecode Society Management System edit_admin.php sql injection

A vulnerability was detected in itsourcecode Society Management System 1.0. This vulnerability affects unknown code of the file /admin/editadmin.php. The manipulation of the argument adminid results in sql injection. The attack may be performed from remote. The exploit is now public and may be us...

7.5CVSS5.5AI score0.00013EPSS
Exploits1References5
CNNVD
CNNVD
added 2026/02/07 12:0 a.m.3 views

itsourcecode Society Management System SQL注入漏洞

itsourcecode Society Management System is an open-source social management system developed by itsourcecode. Version 1.0 of the itsourcecode Society Management System has a SQL injection vulnerability. This vulnerability arises from incorrect handling of the adminid parameter in the...

9.8CVSS7.2AI score0.00013EPSS
Exploits1References6
NVD
NVD
added 2026/01/08 9:15 p.m.3 views

CVE-2026-0728

A security vulnerability has been detected in code-projects Intern Membership Management System 1.0. This issue affects some unknown processing of the file /intern/admin/deleteadmin.php. Such manipulation of the argument adminid leads to sql injection. The attack may be launched remotely. The...

7.2CVSS0.00014EPSS
Exploits1References5
EUVD
EUVD
added 2026/01/08 5:32 a.m.2 views

EUVD-2026-1589

A vulnerability has been found in code-projects Intern Membership Management System 1.0. This affects an unknown function of the file /intern/admin/editstudents.php. Such manipulation of the argument adminid leads to sql injection. The attack may be launched remotely. The exploit has been disclos...

7.2CVSS6.6AI score0.00014EPSS
Exploits1References7
CVE
CVE
added 2025/12/12 6:32 p.m.7 views

CVE-2025-14570

CVE-2025-14570 affects projectworlds Advanced Library Management System 1.0. The vulnerability is in the file routes involving the parameter that controls the admin ID (notably /view_admin.php or /view admin.php in variants) where improper handling/manipulation of the admin_id parameter enables S...

9.8CVSS6.6AI score0.0001EPSS
Exploits1References4Affected Software1
CNNVD
CNNVD
added 2025/12/12 12:0 a.m.2 views

projectworlds Advanced Library Management System SQL注入漏洞

Projectworlds Advanced Library Management System is an advanced library management system from Projectworlds India. A SQL injection vulnerability exists in projectworlds Advanced Library Management System version 1.0, which stems from incorrect manipulation of the parameter adminid in the file...

9.8CVSS7.8AI score0.0001EPSS
Exploits1References4
RedhatCVE
RedhatCVE
added 2025/11/15 4:28 p.m.3 views

CVE-2025-13170

A vulnerability was detected in code-projects Simple Online Hotel Reservation System 1.0. This issue affects some unknown processing of the file /admin/editaccount.php. Performing a manipulation of the argument adminid results in sql injection. The attack is possible to be carried out remotely. T...

9.8CVSS7.2AI score0.0004EPSS
Exploits1References1
OSV
OSV
added 2025/11/14 4:15 p.m.0 views

CVE-2025-13170

A vulnerability was detected in code-projects Simple Online Hotel Reservation System 1.0. This issue affects some unknown processing of the file /admin/editaccount.php. Performing a manipulation of the argument adminid results in sql injection. The attack is possible to be carried out remotely. T...

9.8CVSS6.9AI score
Exploits0References7
NVD
NVD
added 2025/11/14 4:15 p.m.4 views

CVE-2025-13170

A vulnerability was detected in code-projects Simple Online Hotel Reservation System 1.0. This issue affects some unknown processing of the file /admin/editaccount.php. Performing a manipulation of the argument adminid results in sql injection. The attack is possible to be carried out remotely. T...

9.8CVSS0.0004EPSS
Exploits1References7
EUVD
EUVD
added 2025/11/14 4:2 p.m.2 views

EUVD-2025-197617

A vulnerability was detected in code-projects Simple Online Hotel Reservation System 1.0. This issue affects some unknown processing of the file /admin/editaccount.php. Performing manipulation of the argument adminid results in sql injection. The attack is possible to be carried out remotely. The...

7.5CVSS6.6AI score0.0004EPSS
Exploits1References6
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-27504

Malicious code in bioql PyPI...

7.2CVSS6.6AI score0.00057EPSS
Exploits1References3
CVE
CVE
added 2025/06/24 8:0 p.m.12 views

CVE-2025-6578

The CVE-2025-6578 entry concerns code-projects’ Simple Online Hotel Reservation System 1.0. A vulnerability exists in the /admin/delete_account.php file where manipulating the admin_id parameter triggers a SQL injection. The issue is exploitable remotely and has been disclosed publicly. Affected ...

9.8CVSS7.8AI score0.00204EPSS
Exploits1References5Affected Software1
RedhatCVE
RedhatCVE
added 2025/05/23 9:55 a.m.3 views

CVE-2024-28595

SQL Injection vulnerability in Employee Management System v1.0 allows attackers to run arbitrary SQL commands via the adminid parameter in update-admin.php...

9.8CVSS8.2AI score0.01328EPSS
Exploits4References1
NVD
NVD
added 2024/10/11 4:15 p.m.5 views

CVE-2024-48813

SQL injection vulnerability in employee-management-system-php-and-mysql-free-download.html taskmatic 1.0 allows a remote attacker to execute arbitrary code via the adminid parameter of the /update-employee.php component...

8.8CVSS0.01859EPSS
Exploits0References1
CVE
CVE
added 2024/10/11 12:0 a.m.35 views

CVE-2024-48813

Taskmatic CVE-2024-48813 is a SQL injection affecting Taskmatic version 1.0 where an attacker can pass crafted data to the admin_id parameter of the /update-employee.php endpoint to execute arbitrary code remotely. Public documents consistently describe this as a remote arbitrary-code execution r...

8.8CVSS8.7AI score0.01859EPSS
Exploits0References1
OSV
OSV
added 2024/03/19 8:15 p.m.0 views

CVE-2024-28595

SQL Injection vulnerability in Employee Management System v1.0 allows attackers to run arbitrary SQL commands via the adminid parameter in update-admin.php...

9.8CVSS6AI score0.01328EPSS
Exploits4References1
Vulnrichment
Vulnrichment
added 2024/03/19 12:0 a.m.8 views

CVE-2024-28595

SQL Injection vulnerability in Employee Management System v1.0 allows attackers to run arbitrary SQL commands via the adminid parameter in update-admin.php...

8.2AI score0.01328EPSS
Exploits4References1
Cvelist
Cvelist
added 2024/03/19 12:0 a.m.12 views

CVE-2024-28595

SQL Injection vulnerability in Employee Management System v1.0 allows attackers to run arbitrary SQL commands via the adminid parameter in update-admin.php...

8.2AI score0.01328EPSS
Exploits4References1
exploitpack
exploitpack
added 2017/03/06 12:0 a.m.11 views

MLM Membership Plan Script 2.0.5 - SQL Injection

MLM Membership Plan Script 2.0.5 - SQL Injection Exploit Title: MLM Membership Plan Script v2.0.5 - SQL Injection Google Dork: N/A Date: 06.03.2017 Vendor Homepage: http://www.phpscriptsmall.com/ Software : http://www.phpscriptsmall.com/product/mlm-membership-plan-script/ Demo:...

0.3AI score
Exploits0
Rows per page
Query Builder