Lucene search
K

1112 matches found

RedhatCVE
RedhatCVE
added yesterday5 views

CVE-2026-37595

SourceCodester Online Employees Work From Home Attendance System v1.0 is vulnerable to SQL Injection in the file /wfhattendance/admin/manageemployee.php...

2.7CVSS5.7AI score0.0003EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added yesterday4 views

CVE-2026-37597

SourceCodester Online Employees Work From Home Attendance System v1.0 is vulnerable to SQL Injection in the file /wfhattendance/admin/attendancelist.php...

2.7CVSS5.7AI score0.0003EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added yesterday3 views

CVE-2026-37593

SourceCodester Online Employees Work From Home Attendance System v1.0 is vulnerable to SQL Injection in the file /wfhattendance/admin/viewatt.php...

2.7CVSS5.7AI score0.0003EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added yesterday3 views

CVE-2026-37594

SourceCodester Online Employees Work From Home Attendance System v1.0 is vulnerable to SQL Injection in the file /wfhattendance/admin/viewemployee.php...

2.7CVSS5.7AI score0.0003EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added yesterday3 views

CVE-2026-37596

SourceCodester Online Employees Work From Home Attendance System v1.0 is vulnerable to SQL Injection in the file /wfhattendance/admin/managedepartment.php...

2.7CVSS5.7AI score0.0003EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added yesterday4 views

CVE-2026-37749

A SQL injection vulnerability in CodeAstro Simple Attendance Management System v1.0 allows remote unauthenticated attackers to bypass authentication via the username parameter in index.php...

9.8CVSS5.7AI score0.00075EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added yesterday5 views

CVE-2026-3781

The Attendance Manager plugin for WordPress is vulnerable to SQL Injection via the 'attmgroff' parameter in all versions up to, and including, 0.6.2. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...

5.4CVSS5.7AI score0.00029EPSS
Exploits0References1
EUVD
EUVD
added 2026/04/17 3:31 p.m.3 views

EUVD-2026-23440

A SQL injection vulnerability in CodeAstro Simple Attendance Management System v1.0 allows remote unauthenticated attackers to bypass authentication via the username parameter in index.php...

9.8CVSS5.9AI score0.00075EPSS
Exploits1References3
NVD
NVD
added 2026/04/17 3:16 p.m.4 views

CVE-2026-37749

A SQL injection vulnerability in CodeAstro Simple Attendance Management System v1.0 allows remote unauthenticated attackers to bypass authentication via the username parameter in index.php...

9.8CVSS0.00075EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2026/04/17 12:0 a.m.2 views

CVE-2026-37749

A SQL injection vulnerability in CodeAstro Simple Attendance Management System v1.0 allows remote unauthenticated attackers to bypass authentication via the username parameter in index.php...

5.9AI score0.00075EPSS
Exploits1References2
CVE
CVE
added 2026/04/17 12:0 a.m.6 views

CVE-2026-37749

CodeAstro Simple Attendance Management System v1.0 is affected by a SQL injection in index.php via the username parameter, enabling remote unauthenticated attackers to bypass login and gain admin access. Root cause: direct interpolation of user input into the SQL query without proper escaping or ...

9.8CVSS5.9AI score0.00075EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2026/04/17 12:0 a.m.1 views

CVE-2026-37749

A SQL injection vulnerability in CodeAstro Simple Attendance Management System v1.0 allows remote unauthenticated attackers to bypass authentication via the username parameter in index.php...

9.8CVSS5.9AI score0.00075EPSS
Exploits1References3
Cvelist
Cvelist
added 2026/04/17 12:0 a.m.26 views

CVE-2026-37749

A SQL injection vulnerability in CodeAstro Simple Attendance Management System v1.0 allows remote unauthenticated attackers to bypass authentication via the username parameter in index.php...

0.00075EPSS
Exploits1References2
CNNVD
CNNVD
added 2026/04/17 12:0 a.m.4 views

Anviz CrossChex Standard 安全漏洞

Anviz CrossChex Standard is a centralized control software developed by Anviz Corporation in the United States, used for access control and attendance data management. Anviz CrossChex Standard has a security vulnerability. This vulnerability arises from the ability of attackers to manipulate the...

7.5CVSS5.8AI score0.00028EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/04/17 12:0 a.m.4 views

Anviz CrossChex Standard 安全漏洞

Anviz CrossChex Standard is a centralized control software developed by Anviz Corporation in the United States, used for access control and attendance data management. Anviz CrossChex Standard has a security vulnerability. This vulnerability stems from the lack of source verification in the...

8.1CVSS5.8AI score0.0004EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/04/17 12:0 a.m.0 views

PT-2026-33420

Name of the Vulnerable Software and Affected Versions CodeAstro Simple Attendance Management System version 1.0 Description A SQL injection allows remote unauthenticated attackers to bypass authentication. This occurs via the username parameter in the 'index.php' endpoint. Recommendations At the...

9.8CVSS5.8AI score0.00075EPSS
Exploits1References7
GithubExploit
GithubExploit
added 2026/04/16 6:25 p.m.87 views

Exploit for CVE-2026-37749

CVE-2026-37749 CVE-2026-37749 — CodeAstro Simple Attendance...

6AI score0.00075EPSS
Exploits1
EUVD
EUVD
added 2026/04/14 3:30 p.m.1 views

EUVD-2026-22268

SourceCodester Online Employees Work From Home Attendance System v1.0 is vulnerable to SQL Injection in the file /wfhattendance/admin/attendancelist.php...

2.7CVSS5.9AI score0.0003EPSS
Exploits0References2
EUVD
EUVD
added 2026/04/14 3:30 p.m.1 views

EUVD-2026-22266

SourceCodester Online Employees Work From Home Attendance System v1.0 is vulnerable to SQL Injection in the file /wfhattendance/admin/managedepartment.php...

2.7CVSS5.9AI score0.0003EPSS
Exploits0References2
EUVD
EUVD
added 2026/04/14 3:30 p.m.2 views

EUVD-2026-22264

SourceCodester Online Employees Work From Home Attendance System v1.0 is vulnerable to SQL Injection in the file /wfhattendance/admin/manageemployee.php...

2.7CVSS5.9AI score0.0003EPSS
Exploits0References2
Rows per page
Query Builder