Lucene search
+L

1197 matches found

Vulnrichment
Vulnrichment
added 2026/04/14 12:00 a.m.7 views

CVE-2026-37593

SourceCodester Online Employees Work From Home Attendance System v1.0 is vulnerable to SQL Injection in the file /wfhattendance/admin/viewatt.php...

5.9AI score0.0019EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/04/14 12:00 a.m.30 views

PT-2026-32636

CVE-2026-37595 SourceCodester Online Employees Work From Home Attendance System v1.0 is vulnerable to SQL Injection in the file /wfh attendance/admin/manage employee.php. https://t.co/mf3uV1c2ec...

2.7CVSS5.8AI score0.00186EPSS
SaveExploits0References3
attackerkb
attackerkb
added 2026/04/14 12:00 a.m.6 views

CVE-2026-37596

SourceCodester Online Employees Work From Home Attendance System v1.0 is vulnerable to SQL Injection in the file /wfhattendance/admin/managedepartment.php...

5.9AI score0.0019EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/04/14 12:00 a.m.25 views

PT-2026-32634

CVE-2026-37593 SourceCodester Online Employees Work From Home Attendance System v1.0 is vulnerable to SQL Injection in the file /wfh attendance/admin/view att.php. https://t.co/c4uhTDec9s...

2.7CVSS5.8AI score0.0019EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/04/14 12:00 a.m.5 views

CVE-2026-37594

SourceCodester Online Employees Work From Home Attendance System v1.0 is vulnerable to SQL Injection in the file /wfhattendance/admin/viewemployee.php...

5.9AI score0.0019EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/04/14 12:00 a.m.15 views

SourceCodester Online Employees Work From Home Attendance System 安全漏洞

SourceCodester Online Employees Work From Home Attendance System is an open-source online employee remote work attendance system developed by SourceCodester. Version 1.0 of the SourceCodester Online Employees Work From Home Attendance System contains a security vulnerability. This vulnerability...

2.7CVSS5.9AI score0.00186EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/04/14 12:00 a.m.42 views

CVE-2026-37593

SourceCodester Online Employees Work From Home Attendance System v1.0 is vulnerable to SQL Injection in the file /wfhattendance/admin/viewatt.php...

0.0019EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/04/08 9:31 a.m.12 views

EUVD-2026-20107

The Attendance Manager plugin for WordPress is vulnerable to SQL Injection via the 'attmgroff' parameter in all versions up to, and including, 0.6.2. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...

5.4CVSS5.9AI score0.00179EPSS
SaveExploits0References4
Patchstack
Patchstack
added 2026/04/08 7:35 a.m.15 views

WordPress Attendance Manager plugin <= 0.6.2 - Authenticated (Subscriber+) SQL Injection via 'attmgr_off' Parameter vulnerability

Authenticated Subscriber+ SQL Injection via 'attmgroff' Parameter vulnerability discovered by Maurice Fielenbach Hexastrike - Hexastrike Cybersecurity UG haftungsbeschränkt in WordPress Plugin Attendance Manager versions = 0.6.2...

5.4CVSS5.9AI score0.00179EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2026/04/08 7:16 a.m.15 views

CVE-2026-3781

The Attendance Manager plugin for WordPress is vulnerable to SQL Injection via the 'attmgroff' parameter in all versions up to, and including, 0.6.2. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...

5.4CVSS0.00179EPSS
SaveExploits0References3
CVE
CVE
added 2026/04/08 6:43 a.m.36 views

CVE-2026-3781

Affected product: Attendance Manager plugin for WordPress. Vulnerability: SQL Injection via the 'attmgr_off' parameter in all versions up to and including 0.6.2, caused by insufficient escaping of user input and inadequate preparation of the SQL query. Impact (as stated): authenticated attackers ...

5.4CVSS5.9AI score0.00179EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/04/08 6:43 a.m.39 views

CVE-2026-3781 Attendance Manager <= 0.6.2 - Authenticated (Subscriber+) SQL Injection via 'attmgr_off' Parameter

The Attendance Manager plugin for WordPress is vulnerable to SQL Injection via the 'attmgroff' parameter in all versions up to, and including, 0.6.2. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...

5.4CVSS0.00179EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/04/08 6:43 a.m.6 views

CVE-2026-3781 Attendance Manager <= 0.6.2 - Authenticated (Subscriber+) SQL Injection via 'attmgr_off' Parameter

The Attendance Manager plugin for WordPress is vulnerable to SQL Injection via the 'attmgroff' parameter in all versions up to, and including, 0.6.2. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...

5.4CVSS5.9AI score0.00179EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/04/08 12:00 a.m.15 views

PT-2026-31098

The Attendance Manager plugin for WordPress is vulnerable to SQL Injection via the 'attmgr off' parameter in all versions up to, and including, 0.6.2. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...

5.4CVSS5.9AI score0.00179EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2026/04/08 12:00 a.m.18 views

WordPress plugin Attendance Manager SQL注入漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

5.4CVSS5.9AI score0.00179EPSS
SaveExploits0References3
OSV
OSV
added 2026/03/08 9:15 p.m.9 views

CVE-2026-3767

A weakness has been identified in itsourcecode sanitize or validate this input 1.0. Affected is an unknown function of the file /admin/teacher-attendance.php. Executing a manipulation of the argument teacherid can lead to sql injection. The attack may be launched remotely. The exploit has been ma...

8.8CVSS5.8AI score0.00265EPSS
SaveExploits1References5
NVD
NVD
added 2026/03/08 9:15 p.m.12 views

CVE-2026-3767

A weakness has been identified in itsourcecode sanitize or validate this input 1.0. Affected is an unknown function of the file /admin/teacher-attendance.php. Executing a manipulation of the argument teacherid can lead to sql injection. The attack may be launched remotely. The exploit has been ma...

8.8CVSS0.00265EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2026/03/08 8:32 p.m.54 views

CVE-2026-3767 itsourcecode sanitize or validate this input teacher-attendance.php sql injection

A weakness has been identified in itsourcecode sanitize or validate this input 1.0. Affected is an unknown function of the file /admin/teacher-attendance.php. Executing a manipulation of the argument teacherid can lead to sql injection. The attack may be launched remotely. The exploit has been ma...

6.5CVSS0.00265EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2026/03/08 8:32 p.m.8 views

CVE-2026-3767 itsourcecode sanitize or validate this input teacher-attendance.php sql injection

A weakness has been identified in itsourcecode sanitize or validate this input 1.0. Affected is an unknown function of the file /admin/teacher-attendance.php. Executing a manipulation of the argument teacherid can lead to sql injection. The attack may be launched remotely. The exploit has been ma...

6.5CVSS5.8AI score0.00265EPSS
SaveExploits1References5
attackerkb
attackerkb
added 2026/03/08 8:32 p.m.6 views

CVE-2026-3767

A weakness has been identified in itsourcecode sanitize or validate this input 1.0. Affected is an unknown function of the file /admin/teacher-attendance.php. Executing a manipulation of the argument teacherid can lead to sql injection. The attack may be launched remotely. The exploit has been ma...

6.5CVSS5.8AI score0.00265EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder