CVE-2026-94015 SourceCodester Drug Recommendation System edit_user.php sql injection

A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the file /drugrecommender/Admin/edituser.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit is publicly available an...

EUVD-2026-83736

A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the file /drugrecommender/Admin/edituser.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit is publicly available an...

EUVD-2026-83734

mayswind ezBookkeeping before 2.0.0 fails to invalidate TOTP passcodes after use, allowing attackers to replay captured codes within the acceptance window. Attackers with stolen credentials can authenticate and reuse a captured passcode against multiple authorization attempts for approximately 90...

CVE-2026-94004

DedeCMS versions up to 5.7.118 are affected by a code injection vulnerability in the file plus/mytag_js.php . The root cause is the manipulation of the aid argument within an unknown function of that file. The vulnerability is exploitable remotely with no privileges and no user interaction requir...

CVE-2026-94003

A stack-based buffer overflow in the function get_css_path_from_uri within /cgi-bin/mbox-config of the Comfast CF-N1-S Web Management Interface (version 2.6.0.1) allows an unauthenticated remote attacker to trigger the overflow, leading to high impact on confidentiality, integrity, and availabili...

CVE-2026-93979

A security flaw has been discovered in code-projects Internship Management System 1.0. This affects an unknown part of the file /employer/login.php. Performing a manipulation of the argument Password results in sql injection. The attack is possible to be carried out remotely. The exploit has been...

EUVD-2026-83722

A security flaw has been discovered in code-projects Internship Management System 1.0. This affects an unknown part of the file /employer/login.php. Performing a manipulation of the argument Password results in sql injection. The attack is possible to be carried out remotely. The exploit has been...

EUVD-2026-83721

A vulnerability was identified in code-projects Internship Management System 1.0. Affected by this issue is some unknown functionality of the file /login.php. Such manipulation of the argument Password leads to sql injection. The attack can be executed remotely. The exploit is publicly available...

CVE-2026-93975

A vulnerability has been found in code-projects Assessment Management 1.0. This impacts an unknown function of the file admin/edit-user.php of the component User Editing. The manipulation of the argument name/sname/email/username/password/id leads to cross site scripting. The attack may be...

CVE-2026-93976 code-projects Assessment Management add-user.php cross site scripting

A vulnerability was found in code-projects Assessment Management 1.0. Affected is an unknown function of the file admin/add-user.php. The manipulation of the argument level results in cross site scripting. The attack may be launched remotely. The exploit has been made public and could be used...

CVE-2026-93976 code-projects Assessment Management add-user.php cross site scripting

A vulnerability was found in code-projects Assessment Management 1.0. Affected is an unknown function of the file admin/add-user.php. The manipulation of the argument level results in cross site scripting. The attack may be launched remotely. The exploit has been made public and could be used...

EUVD-2026-83718

A vulnerability has been found in code-projects Assessment Management 1.0. This impacts an unknown function of the file admin/edit-user.php of the component User Editing. The manipulation of the argument name/sname/email/username/password/id leads to cross site scripting. The attack may be...

CVE-2026-93974

A flaw has been found in SourceCodester Online Reviewer Management System 1.0. This affects an unknown function of the file /reviewer0/admins/assessments/databank/btnfunctions.php?action=remove. Executing a manipulation of the argument ID can lead to sql injection. The attack can be launched...

CVE-2026-93974 SourceCodester Online Reviewer Management System btn_functions.php remove sql injection

A flaw has been found in SourceCodester Online Reviewer Management System 1.0. This affects an unknown function of the file /reviewer0/admins/assessments/databank/btnfunctions.php?action=remove. Executing a manipulation of the argument ID can lead to sql injection. The attack can be launched...

CVE-2026-93973 SourceCodester Online Reviewer Management System btn_functions.php remove sql injection

A vulnerability was detected in SourceCodester Online Reviewer Management System 1.0. The impacted element is an unknown function of the file /reviewer0/admins/assessments/subject/btnfunctions.php?action=remove. Performing a manipulation of the argument ID results in sql injection. The attack can...

EUVD-2026-83715

A vulnerability was detected in SourceCodester Online Reviewer Management System 1.0. The impacted element is an unknown function of the file /reviewer0/admins/assessments/subject/btnfunctions.php?action=remove. Performing a manipulation of the argument ID results in sql injection. The attack can...

CVE-2026-93971

A weakness has been identified in aiyiyi121 SxDevOps 1.0/1.1. Impacted is an unknown function of the file backend/sxdevops/settings.py. This manipulation causes information disclosure. It is possible to initiate the attack remotely. Patch name: 2b4bf8585c3e731e7a8af30801ea46680bc783f9. It is...

CVE-2026-93970

A security flaw has been discovered in aiyiyi121 SxDevOps 1.0/1.1. This issue affects some unknown processing of the file backend/sxdevops/settings.py of the component Settings Handler. The manipulation results in hard-coded credentials. The attack may be performed from remote. The patch is...

CVE-2026-93972

SourceCodester Online Reviewer Management System 1.0 contains a SQL injection vulnerability in the file /reviewer_0/admins/assessments/course/btn_functions.php, exploitable remotely via manipulation of the courseID parameter without authentication. The CNA rates the base severity as HIGH (CVSS v3...

CVE-2026-93971

An information disclosure vulnerability was identified in aiyiyi121 SxDevOps versions 1.0 and 1.1, located in an unknown function of the file backend/sxdevops/settings.py . The weakness can be exploited remotely without authentication, leading to a low confidentiality impact (CVSS 3.1: 5.3 Medium...