CVE-2026-26700

sourcecodester Personnel Property Equipment System v1.0 is vulnerable to SQL Injection in /ppes/admin/editemployee.php...

CVE-2025-14989

A vulnerability was identified in Campcodes Complete Online Beauty Parlor Management System 1.0. This issue affects some unknown processing of the file /admin/search-invoices.php. Such manipulation leads to sql injection. The attack can be launched remotely. The exploit is publicly available and...

EUVD-2025-25207

Malicious code in bioql PyPI...

EUVD-2025-31011

Malicious code in bioql PyPI...

CVE-2025-8933

CVE-2025-8933 affects the open‑source product 1000 Projects Sales Management System v1.0 . A cross‑site scripting vulnerability exists in the processing of the file /superstore/admin/sales.php due to unsafely handling the parameter ssalescat . The issue can be triggered remotely and the exploit h...

CVE-2022-36719

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the ok parameter at /admin/history.php...

PT-2024-17161 · Engenius · Engenius Ens500-Ac +2

Name of the Vulnerable Software and Affected Versions: EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118 Description: A critical vulnerability affects an unknown functionality of the file /admin/sn package/sn https. The manipulation of the argument https enable leads to command injectio...

Php-fusion PHP-Fusion 跨站脚本漏洞

PHP-Fusion is a lightweight open source content management system. A stored cross-site scripting vulnerability exists in /administration/settingsecurity.php in PHP-Fusion version 9.03.60, which can be exploited by an attacker to execute arbitrary Web script or HTML...

Php-fusion PHP-Fusion跨站脚本漏洞

PHP-Fusion is a lightweight open source content management system. A stored cross-site scripting vulnerability exists in /administration/settingsregistration.php in PHP-Fusion version 9.03.60, which can be exploited to execute arbitrary web script or HTML via the "registration" field...

WordPress User Role Editor Plugin < 4.25 - Privilege Escalation Exploit

Exploit for php platform in category web applications This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'WordPress User Role Editor Plugin Privilege Escalation', 'Description' = %q The WordPress...

ARASTAR - SQL Injection

++ |o ID | ++ + Title : ARASTAR SQL Injection Vulnerability + Affected Version : ALL VERSIONS + Software Link : http://ara-star.com/art.php?ID=172 + Tested on : Windows XP SP2 + Date : 18/11/2011 + Dork : inurl:'.co.il/Cat.php?ID=' intext:"POWERED BY ARASTAR" + Category : Content Management +...