Lucene search
+L

30 matches found

Kitploit
Kitploit
•added 2026/10/04 11:15 p.m.•9 views

CVE-2023-46021-Code-Projects-Blood-Bank-1.0-SQL-Injection-Vulnerability

CVE-2023-46021-Code-Projects-Blood-Bank-1.0-OOB-SQL-Injection-Vulnerability Exploit Author: ersinerenler Vendor Homepage https://code-projects.org/blood-bank-in-php-with-source-code Software Link https://download-media.code-projects.org/2020/11/BloodBankInPHPWithSourcecode.zip Overview...

5.5CVSS6.5AI score0.00349EPSS
SaveExploits2
NVD
NVD
•added 2026/09/30 4:17 p.m.•10 views

CVE-2026-103231

A vulnerability was identified in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. The affected element is the function mysqliquery of the file User/cancel.php of the component Order Cancellation. The manipulation of the argument ID leads to sql injectio...

7.5CVSS0.00412EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/09/30 4:00 p.m.•43 views

CVE-2026-103231 AdithyaYelloju Restaurant-Management-System Order Cancellation cancel.php mysqli_query sql injection

A vulnerability was identified in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. The affected element is the function mysqliquery of the file User/cancel.php of the component Order Cancellation. The manipulation of the argument ID leads to sql injectio...

7.5CVSS0.00412EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/09/30 4:00 p.m.•10 views

EUVD-2026-90074

A vulnerability was identified in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. The affected element is the function mysqliquery of the file User/cancel.php of the component Order Cancellation. The manipulation of the argument ID leads to sql injectio...

7.5CVSS5.5AI score0.00412EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/09/30 4:00 p.m.•8 views

CVE-2026-103231 AdithyaYelloju Restaurant-Management-System Order Cancellation cancel.php mysqli_query sql injection

A vulnerability was identified in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. The affected element is the function mysqliquery of the file User/cancel.php of the component Order Cancellation. The manipulation of the argument ID leads to sql injectio...

7.5CVSS5.5AI score0.00412EPSS
SaveExploits0References6
OSV
OSV
•added 2026/09/30 4:00 p.m.•5 views

CVE-2026-103231 AdithyaYelloju Restaurant-Management-System Order Cancellation cancel.php mysqli_query sql injection

A vulnerability was identified in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. The affected element is the function mysqliquery of the file User/cancel.php of the component Order Cancellation. The manipulation of the argument ID leads to sql injectio...

6.9CVSS5.5AI score
SaveExploits0References8
CVE
CVE
•added 2026/09/30 4:00 p.m.•15 views

CVE-2026-103231

A SQL injection vulnerability exists in the Order Cancellation component of the AdithyaYelloju Restaurant-Management-System (up to commit 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c). The flaw is located in the mysqli_query function within the User/cancel.php file, where manipulation of the ID argum...

7.5CVSS5.5AI score0.00412EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/09/30 12:00 a.m.•6 views

PT-2026-103348

🚨 CVE-2026-103231 A vulnerability was identified in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. The affected element is the function mysqli query of the file User/cancel.php of the component Order Cancellation. The manipulation of the argument ID...

7.5CVSS5.5AI score0.00412EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/30 12:00 a.m.•7 views

CVE-2026-103231: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. The affected element is the function mysqliquery of the file User/cancel.php of the component Order Cancellation. The manipulation of the argument ID leads to sql injectio...

7.5CVSS5.5AI score0.00412EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/06/05 7:50 p.m.•25 views

CVE-2026-7118

A security vulnerability has been detected in code-projects Employee Management System 1.0. The affected element is an unknown function of the file 370project/cancel.php. The manipulation of the argument id/token leads to sql injection. The attack is possible to be carried out remotely. The explo...

6.5CVSS6.4AI score0.00316EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/04/27 11:15 a.m.•10 views

CVE-2026-7118 code-projects Employee Management System cancel.php sql injection

A security vulnerability has been detected in code-projects Employee Management System 1.0. The affected element is an unknown function of the file 370project/cancel.php. The manipulation of the argument id/token leads to sql injection. The attack is possible to be carried out remotely. The explo...

6.5CVSS6.4AI score0.00316EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/27 12:00 a.m.•2 views

CVE-2026-7118: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in code-projects Employee Management System 1.0. The affected element is an unknown function of the file 370project/cancel.php. The manipulation of the argument id/token leads to sql injection. The attack is possible to be carried out remotely. The explo...

6.5CVSS6.4AI score0.00316EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/04/27 12:00 a.m.•23 views

PT-2026-35408

A security vulnerability has been detected in code-projects Employee Management System 1.0. The affected element is an unknown function of the file 370project/cancel.php. The manipulation of the argument id/token leads to sql injection. The attack is possible to be carried out remotely. The explo...

6.5CVSS6.4AI score0.00316EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/01 12:00 a.m.•8 views

CVE-2025-63532: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability exists in the Blood Bank Management System 1.0 within the cancel.php component. The application fails to properly sanitize user-supplied input in SQL queries, allowing an attacker to inject arbitrary SQL code. By manipulating the search field, an attacker can bypass...

9.6CVSS6AI score0.00389EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 3:52 a.m.•17 views

CVE-2023-46021

SQL Injection vulnerability in cancel.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary commands via the 'reqid' parameter...

5.5CVSS8.4AI score0.00349EPSS
SaveExploits2
Cvelist
Cvelist
•added 2024/10/27 12:31 p.m.•52 views

CVE-2024-10416 code-projects Blood Bank Management System cancel.php sql injection

A vulnerability was found in code-projects Blood Bank Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /file/cancel.php. The manipulation of the argument reqid leads to sql injection. The attack may be initiated remotely. The exploit has bee...

6.5CVSS0.00545EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2024/10/27 12:31 p.m.•22 views

CVE-2024-10416 code-projects Blood Bank Management System cancel.php sql injection

A vulnerability was found in code-projects Blood Bank Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /file/cancel.php. The manipulation of the argument reqid leads to sql injection. The attack may be initiated remotely. The exploit has bee...

6.5CVSS6.8AI score0.00545EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/27 12:00 a.m.•2 views

CVE-2024-10416: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Blood Bank Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /file/cancel.php. The manipulation of the argument reqid leads to sql injection. The attack may be initiated remotely. The exploit has bee...

8.8CVSS6.4AI score0.00545EPSS
SaveExploits1References1
NVD
NVD
•added 2024/02/26 4:27 p.m.•43 views

CVE-2024-1877

A vulnerability was found in SourceCodester Employee Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /cancel.php. The manipulation of the argument id with the input 1%20or%201=1 leads to sql injection. The attack can ...

8.8CVSS6.8AI score0.00628EPSS
SaveExploits0References3
Prion
Prion
•added 2024/02/26 4:27 p.m.•36 views

Sql injection

A vulnerability was found in SourceCodester Employee Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /cancel.php. The manipulation of the argument id with the input 1%20or%201=1 leads to sql injection. The attack can ...

6.5CVSS7.7AI score0.00628EPSS
SaveExploits0References3
Rows per page
Query Builder