Lucene search
K

14 matches found

CVE
CVE
added 2026/02/07 10:2 p.m.10 views

CVE-2026-2114

The CVE-2026-2114 entry affects itsourcecode Society Management System 1.0. The vulnerability resides in the /admin/edit_admin.php code path, where manipulation of the admin_id parameter leads to SQL injection. Attacks can be performed remotely, and public exploits exist. Multiple connected sourc...

9.8CVSS7.2AI score0.00013EPSS
Exploits1References5Affected Software1
CNNVD
CNNVD
added 2026/02/07 12:0 a.m.3 views

itsourcecode Society Management System SQL注入漏洞

itsourcecode Society Management System is an open-source social management system developed by itsourcecode. Version 1.0 of the itsourcecode Society Management System has a SQL injection vulnerability. This vulnerability arises from incorrect handling of the adminid parameter in the...

9.8CVSS7.2AI score0.00013EPSS
Exploits1References6
EUVD
EUVD
added 2026/01/08 5:32 a.m.2 views

EUVD-2026-1589

A vulnerability has been found in code-projects Intern Membership Management System 1.0. This affects an unknown function of the file /intern/admin/editstudents.php. Such manipulation of the argument adminid leads to sql injection. The attack may be launched remotely. The exploit has been disclos...

7.2CVSS6.6AI score0.00014EPSS
Exploits1References7
CNNVD
CNNVD
added 2025/12/12 12:0 a.m.2 views

projectworlds Advanced Library Management System SQL注入漏洞

Projectworlds Advanced Library Management System is an advanced library management system from Projectworlds India. A SQL injection vulnerability exists in projectworlds Advanced Library Management System version 1.0, which stems from incorrect manipulation of the parameter adminid in the file...

9.8CVSS7.8AI score0.0001EPSS
Exploits1References4
RedhatCVE
RedhatCVE
added 2025/11/15 4:28 p.m.3 views

CVE-2025-13170

A vulnerability was detected in code-projects Simple Online Hotel Reservation System 1.0. This issue affects some unknown processing of the file /admin/editaccount.php. Performing a manipulation of the argument adminid results in sql injection. The attack is possible to be carried out remotely. T...

9.8CVSS7.2AI score0.0004EPSS
Exploits1References1
OSV
OSV
added 2025/11/14 4:15 p.m.0 views

CVE-2025-13170

A vulnerability was detected in code-projects Simple Online Hotel Reservation System 1.0. This issue affects some unknown processing of the file /admin/editaccount.php. Performing a manipulation of the argument adminid results in sql injection. The attack is possible to be carried out remotely. T...

9.8CVSS6.9AI score
Exploits0References7
NVD
NVD
added 2025/11/14 4:15 p.m.4 views

CVE-2025-13170

A vulnerability was detected in code-projects Simple Online Hotel Reservation System 1.0. This issue affects some unknown processing of the file /admin/editaccount.php. Performing a manipulation of the argument adminid results in sql injection. The attack is possible to be carried out remotely. T...

9.8CVSS0.0004EPSS
Exploits1References7
EUVD
EUVD
added 2025/11/14 4:2 p.m.2 views

EUVD-2025-197617

A vulnerability was detected in code-projects Simple Online Hotel Reservation System 1.0. This issue affects some unknown processing of the file /admin/editaccount.php. Performing manipulation of the argument adminid results in sql injection. The attack is possible to be carried out remotely. The...

7.5CVSS6.6AI score0.0004EPSS
Exploits1References6
RedhatCVE
RedhatCVE
added 2025/05/23 9:55 a.m.3 views

CVE-2024-28595

SQL Injection vulnerability in Employee Management System v1.0 allows attackers to run arbitrary SQL commands via the adminid parameter in update-admin.php...

9.8CVSS8.2AI score0.01328EPSS
Exploits4References1
NVD
NVD
added 2024/10/11 4:15 p.m.5 views

CVE-2024-48813

SQL injection vulnerability in employee-management-system-php-and-mysql-free-download.html taskmatic 1.0 allows a remote attacker to execute arbitrary code via the adminid parameter of the /update-employee.php component...

8.8CVSS0.01859EPSS
Exploits0References1
CVE
CVE
added 2024/10/11 12:0 a.m.35 views

CVE-2024-48813

Taskmatic CVE-2024-48813 is a SQL injection affecting Taskmatic version 1.0 where an attacker can pass crafted data to the admin_id parameter of the /update-employee.php endpoint to execute arbitrary code remotely. Public documents consistently describe this as a remote arbitrary-code execution r...

8.8CVSS8.7AI score0.01859EPSS
Exploits0References1
OSV
OSV
added 2024/03/19 8:15 p.m.0 views

CVE-2024-28595

SQL Injection vulnerability in Employee Management System v1.0 allows attackers to run arbitrary SQL commands via the adminid parameter in update-admin.php...

9.8CVSS6AI score0.01328EPSS
Exploits4References1
Vulnrichment
Vulnrichment
added 2024/03/19 12:0 a.m.8 views

CVE-2024-28595

SQL Injection vulnerability in Employee Management System v1.0 allows attackers to run arbitrary SQL commands via the adminid parameter in update-admin.php...

8.2AI score0.01328EPSS
Exploits4References1
Cvelist
Cvelist
added 2024/03/19 12:0 a.m.12 views

CVE-2024-28595

SQL Injection vulnerability in Employee Management System v1.0 allows attackers to run arbitrary SQL commands via the adminid parameter in update-admin.php...

8.2AI score0.01328EPSS
Exploits4References1
Rows per page
Query Builder