Lucene search
+L

63 matches found

NVD
NVD
•added 2026/10/26 10:16 a.m.•9 views

CVE-2026-116255

A vulnerability has been found in PGYER codefever up to 0c35e60f006f9d558cc33a159baf110659351990. Affected is the function detail of the file application/controllers/doc.php of the component URI Sanitizer. The manipulation of the argument uristring leads to path traversal. The attack may be...

6.9CVSS0.00683EPSS
SaveExploits0References8
osv_cve
osv_cve
•added 2026/10/26 10:00 a.m.•10 views

CVE-2026-116255 PGYER codefever URI Sanitizer doc.php _detail path traversal

A vulnerability has been found in PGYER codefever up to 0c35e60f006f9d558cc33a159baf110659351990. Affected is the function detail of the file application/controllers/doc.php of the component URI Sanitizer. The manipulation of the argument uristring leads to path traversal. The attack may be...

6.9CVSS5.2AI score0.00683EPSS
SaveExploits0References10
EUVD
EUVD
•added 2026/10/26 10:00 a.m.•10 views

EUVD-2026-109713

A vulnerability has been found in PGYER codefever up to 0c35e60f006f9d558cc33a159baf110659351990. Affected is the function detail of the file application/controllers/doc.php of the component URI Sanitizer. The manipulation of the argument uristring leads to path traversal. The attack may be...

6.9CVSS5.2AI score0.00683EPSS
SaveExploits0References8
CVE
CVE
•added 2026/10/26 10:00 a.m.•19 views

CVE-2026-116255

A path traversal vulnerability exists in the URI Sanitizer component of PGYER codefever (affected up to commit 0c35e60f006f9d558cc33a159baf110659351990). The flaw is located in the _detail function of the application/controllers/doc.php file, where improper handling of the uri_string argument all...

6.9CVSS5.2AI score0.00683EPSS
SaveExploits0References8
Cvelist
Cvelist
•added 2026/10/26 10:00 a.m.•23 views

CVE-2026-116255 PGYER codefever URI Sanitizer doc.php _detail path traversal

A vulnerability has been found in PGYER codefever up to 0c35e60f006f9d558cc33a159baf110659351990. Affected is the function detail of the file application/controllers/doc.php of the component URI Sanitizer. The manipulation of the argument uristring leads to path traversal. The attack may be...

6.9CVSS0.00683EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2026/10/26 12:00 a.m.•10 views

PT-2026-123255

A vulnerability has been found in PGYER codefever up to 0c35e60f006f9d558cc33a159baf110659351990. Affected is the function detail of the file application/controllers/doc.php of the component URI Sanitizer. The manipulation of the argument uri string leads to path traversal. The attack may be...

6.9CVSS5.2AI score0.00683EPSS
SaveExploits0References9
NVD
NVD
•added 2026/09/28 4:17 a.m.•19 views

CVE-2026-100904

A security vulnerability has been detected in amirsanni mini-inventory-and-sales-management-system up to 81bf0b55f5933f3b0dbb1583204a612e06605b95. Impacted is an unknown function of the file application/controllers/Items.php of the component Items Management Module. The manipulation of the argume...

5.1CVSS0.00191EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/09/28 3:30 a.m.•15 views

CVE-2026-100904 amirsanni mini-inventory-and-sales-management-system Items Management Items.php cross site scripting

A security vulnerability has been detected in amirsanni mini-inventory-and-sales-management-system up to 81bf0b55f5933f3b0dbb1583204a612e06605b95. Impacted is an unknown function of the file application/controllers/Items.php of the component Items Management Module. The manipulation of the argume...

5.1CVSS4.1AI score0.00191EPSS
SaveExploits0References4
CVE
CVE
•added 2026/09/28 3:30 a.m.•36 views

CVE-2026-100904

The amirsanni mini-inventory-and-sales-management-system is vulnerable to a cross-site scripting (XSS) flaw within the Items Management Module . Specifically, an unknown function in the file application/controllers/Items.php fails to properly handle the itemName argument, allowing for remote expl...

5.1CVSS3.9AI score0.00191EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/28 3:30 a.m.•17 views

EUVD-2026-88071

A security vulnerability has been detected in amirsanni mini-inventory-and-sales-management-system up to 81bf0b55f5933f3b0dbb1583204a612e06605b95. Impacted is an unknown function of the file application/controllers/Items.php of the component Items Management Module. The manipulation of the argume...

5.1CVSS3.9AI score0.00191EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/09/28 3:30 a.m.•51 views

CVE-2026-100904 amirsanni mini-inventory-and-sales-management-system Items Management Items.php cross site scripting

A security vulnerability has been detected in amirsanni mini-inventory-and-sales-management-system up to 81bf0b55f5933f3b0dbb1583204a612e06605b95. Impacted is an unknown function of the file application/controllers/Items.php of the component Items Management Module. The manipulation of the argume...

5.1CVSS0.00191EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/28 12:00 a.m.•14 views

PT-2026-99760

Name of the Vulnerable Software and Affected Versions amirsanni mini-inventory-and-sales-management-system versions up to 81bf0b55f5933f3b0dbb1583204a612e06605b95 Description A cross site scripting issue exists within the Items Management Module in the file application/controllers/Items.php. Remo...

5.1CVSS5.2AI score0.00191EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/28 12:00 a.m.•13 views

CVE-2026-100904: Improper Neutralization of Input During Web Page Generation

A security vulnerability has been detected in amirsanni mini-inventory-and-sales-management-system up to 81bf0b55f5933f3b0dbb1583204a612e06605b95. Impacted is an unknown function of the file application/controllers/Items.php of the component Items Management Module. The manipulation of the argume...

5.1CVSS4.1AI score0.00191EPSS
SaveExploits0References3
KittySploit
KittySploit
•added 2026/07/28 11:27 a.m.•8 views

LimeSurvey 4.1.11 - Local File Inclusion Detection

LimeSurvey before 4.1.12+200324 is vulnerable to local file inclusion because it contains a path traversal vulnerability in application/controllers/admin/LimeSurveyFileManager.php. !/usr/bin/env python3 -- coding: utf-8 -- """LimeSurvey before 4.""" import re from kittysploit import from...

9.8CVSS8.6AI score0.96994EPSS
SaveExploits7References6
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•22 views

EUVD-2022-37149

Malicious code in bioql PyPI...

6.1CVSS6.4AI score0.006EPSS
SaveExploits0References2
Mend
Mend
•added 2025/09/13 1:02 a.m.•9 views

CVE-2025-10331

A vulnerability has been found in cdevroe unmark up to 1.9.3. This issue affects some unknown processing of the file /application/controllers/Marks.php. Such manipulation of the argument Title leads to cross site scripting. The attack can be executed remotely. The exploit has been disclosed to th...

5.4CVSS3.3AI score0.00305EPSS
SaveExploits1References6
Mend
Mend
•added 2025/09/12 10:02 p.m.•9 views

CVE-2025-10329

A vulnerability was detected in cdevroe unmark up to 1.9.3. This affects an unknown part of the file /application/controllers/Marks.php. The manipulation of the argument url results in server-side request forgery. The attack may be launched remotely. The exploit is now public and may be used. The...

9.8CVSS6.2AI score0.0044EPSS
SaveExploits1References7
RedhatCVE
RedhatCVE
•added 2025/05/22 10:18 p.m.•18 views

CVE-2022-48325

Multiple Cross Site Scripting XSS vulnerabilities in Mapos 4.39.0 allow attackers to execute arbitrary code. Affects the following parameters: 1 year, 2 oldSenha, 3 novaSenha, 4 termo, 5 nome, 6 cnpj, 7 ie, 8 cep, 9 logradouro, 10 numero, 11 bairro, 12 cidade, 13 uf, 14 telefone, 15 email, 16 id,...

6.1CVSS7.1AI score0.00637EPSS
SaveExploits1References1
NVD
NVD
•added 2025/04/09 4:15 p.m.•50 views

CVE-2025-29390

jerryhanjj ERP 1.0 is vulnerable to SQL Injection in the setpassword function in application/controllers/home.php...

8.8CVSS0.00463EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2025/04/09 12:00 a.m.•15 views

CVE-2025-29390

jerryhanjj ERP 1.0 is vulnerable to SQL Injection in the setpassword function in application/controllers/home.php...

5.9AI score0.00463EPSS
SaveExploits1References2
Rows per page
Query Builder