Lucene search
+L

1184 matches found

RedhatCVE
RedhatCVE
added 2026/06/05 7:46 p.m.13 views

CVE-2026-37597

SourceCodester Online Employees Work From Home Attendance System v1.0 is vulnerable to SQL Injection in the file /wfhattendance/admin/attendancelist.php...

2.7CVSS5.7AI score0.00186EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/06/05 7:46 p.m.19 views

CVE-2026-37593

SourceCodester Online Employees Work From Home Attendance System v1.0 is vulnerable to SQL Injection in the file /wfhattendance/admin/viewatt.php...

2.7CVSS5.7AI score0.0019EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/06/05 7:46 p.m.19 views

CVE-2026-37594

SourceCodester Online Employees Work From Home Attendance System v1.0 is vulnerable to SQL Injection in the file /wfhattendance/admin/viewemployee.php...

2.7CVSS5.7AI score0.0019EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/06/05 7:45 p.m.21 views

CVE-2026-37596

SourceCodester Online Employees Work From Home Attendance System v1.0 is vulnerable to SQL Injection in the file /wfhattendance/admin/managedepartment.php...

2.7CVSS5.7AI score0.0019EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/06/05 7:45 p.m.14 views

CVE-2026-37749

A SQL injection vulnerability in CodeAstro Simple Attendance Management System v1.0 allows remote unauthenticated attackers to bypass authentication via the username parameter in index.php...

9.8CVSS5.7AI score0.00677EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/06/05 7:37 p.m.16 views

CVE-2026-3781

The Attendance Manager plugin for WordPress is vulnerable to SQL Injection via the 'attmgroff' parameter in all versions up to, and including, 0.6.2. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...

5.4CVSS5.7AI score0.00179EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/04/17 3:31 p.m.12 views

EUVD-2026-23440

A SQL injection vulnerability in CodeAstro Simple Attendance Management System v1.0 allows remote unauthenticated attackers to bypass authentication via the username parameter in index.php...

9.8CVSS5.9AI score0.00677EPSS
SaveExploits1References3
NVD
NVD
added 2026/04/17 3:16 p.m.17 views

CVE-2026-37749

A SQL injection vulnerability in CodeAstro Simple Attendance Management System v1.0 allows remote unauthenticated attackers to bypass authentication via the username parameter in index.php...

9.8CVSS0.00677EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2026/04/17 12:00 a.m.15 views

Anviz CrossChex Standard 安全漏洞

Anviz CrossChex Standard is a centralized control software developed by Anviz Corporation in the United States, used for access control and attendance data management. Anviz CrossChex Standard has a security vulnerability. This vulnerability stems from the lack of source verification in the...

8.1CVSS5.8AI score0.00231EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/17 12:00 a.m.7 views

CVE-2026-37749

A SQL injection vulnerability in CodeAstro Simple Attendance Management System v1.0 allows remote unauthenticated attackers to bypass authentication via the username parameter in index.php...

9.8CVSS5.9AI score0.00677EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2026/04/17 12:00 a.m.9 views

CVE-2026-37749

A SQL injection vulnerability in CodeAstro Simple Attendance Management System v1.0 allows remote unauthenticated attackers to bypass authentication via the username parameter in index.php...

5.9AI score0.00677EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2026/04/17 12:00 a.m.17 views

Anviz CrossChex Standard 安全漏洞

Anviz CrossChex Standard is a centralized control software developed by Anviz Corporation in the United States, used for access control and attendance data management. Anviz CrossChex Standard has a security vulnerability. This vulnerability arises from the ability of attackers to manipulate the...

7.5CVSS5.8AI score0.0021EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/04/17 12:00 a.m.39 views

CVE-2026-37749

A SQL injection vulnerability in CodeAstro Simple Attendance Management System v1.0 allows remote unauthenticated attackers to bypass authentication via the username parameter in index.php...

0.00677EPSS
SaveExploits1References2
CVE
CVE
added 2026/04/17 12:00 a.m.37 views

CVE-2026-37749

CodeAstro Simple Attendance Management System v1.0 is affected by a SQL injection in index.php via the username parameter, enabling remote unauthenticated attackers to bypass login and gain admin access. Root cause: direct interpolation of user input into the SQL query without proper escaping or ...

9.8CVSS5.9AI score0.00677EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2026/04/17 12:00 a.m.20 views

PT-2026-33420

Name of the Vulnerable Software and Affected Versions CodeAstro Simple Attendance Management System version 1.0 Description A SQL injection allows remote unauthenticated attackers to bypass authentication. This occurs via the username parameter in the 'index.php' endpoint. Recommendations At the...

9.8CVSS5.8AI score0.00677EPSS
SaveExploits1References7
GithubExploit
GithubExploit
added 2026/04/16 6:25 p.m.158 views

Exploit for CVE-2026-37749

CVE-2026-37749 CVE-2026-37749 — CodeAstro Simple Attendance...

6AI score0.00677EPSS
SaveExploits1
EUVD
EUVD
added 2026/04/14 3:30 p.m.10 views

EUVD-2026-22268

SourceCodester Online Employees Work From Home Attendance System v1.0 is vulnerable to SQL Injection in the file /wfhattendance/admin/attendancelist.php...

2.7CVSS5.9AI score0.00186EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/04/14 3:30 p.m.10 views

EUVD-2026-22262

SourceCodester Online Employees Work From Home Attendance System v1.0 is vulnerable to SQL Injection in the file /wfhattendance/admin/viewemployee.php...

2.7CVSS5.9AI score0.0019EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/04/14 3:30 p.m.9 views

EUVD-2026-22264

SourceCodester Online Employees Work From Home Attendance System v1.0 is vulnerable to SQL Injection in the file /wfhattendance/admin/manageemployee.php...

2.7CVSS5.9AI score0.00186EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/04/14 3:30 p.m.12 views

EUVD-2026-22260

SourceCodester Online Employees Work From Home Attendance System v1.0 is vulnerable to SQL Injection in the file /wfhattendance/admin/viewatt.php...

2.7CVSS5.9AI score0.0019EPSS
SaveExploits0References2
Rows per page
Query Builder