Lucene search
+L

4878 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/05 12:00 a.m.•7 views

CVE-2026-0605: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in code-projects Online Music Site 1.0. Affected by this vulnerability is an unknown functionality of the file /login.php. Such manipulation of the argument username/password leads to sql injection. The attack may be performed from remote. The exploit ha...

9.8CVSS6.9AI score0.00441EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/05 12:00 a.m.•4 views

CVE-2026-0606: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in code-projects Online Music Site 1.0. Affected by this issue is some unknown functionality of the file /FrontEnd/Albums.php. Performing a manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The exploit is now...

9.8CVSS7AI score0.00456EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2026/01/05 12:00 a.m.•19 views

Code-Projects Online Product Reservation System SQL注入漏洞

Code-Projects Online Product Reservation System is a Code-Projects open source online product reservation system. A SQL injection vulnerability exists in Code-Projects Online Product Reservation System version 1.0, which originates from the incorrect operation of the parameter emailadd in the fil...

9.8CVSS7.8AI score0.00441EPSS
SaveExploits1References7
CNNVD
CNNVD
•added 2026/01/05 12:00 a.m.•15 views

Code-Projects Online Music Site SQL注入漏洞

Code-Projects Online Music Site is an open source online music site by Code-Projects. A SQL injection vulnerability exists in Code-Projects Online Music Site version 1.0, which stems from incorrect manipulation of the parameter ID in the file /FrontEnd/Albums.php, which could lead to a SQL...

9.8CVSS7.6AI score0.00456EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2026/01/05 12:00 a.m.•20 views

Code-Projects Online Product Reservation System SQL注入漏洞

Code-Projects Online Product Reservation System is a Code-Projects open source online product reservation system. A SQL injection vulnerability exists in Code-Projects Online Product Reservation System version 1.0, which stems from an incorrect manipulation of the parameter transactionid in the...

9.8CVSS7.8AI score0.00441EPSS
SaveExploits1References7
CNNVD
CNNVD
•added 2026/01/05 12:00 a.m.•17 views

Code-Projects Online Product Reservation System SQL注入漏洞

Code-Projects Online Product Reservation System is a Code-Projects open source online product reservation system. A SQL injection vulnerability exists in Code-Projects Online Product Reservation System version 1.0, which stems from incorrect manipulation of the parameter ID in the file...

9.8CVSS6.9AI score0.00367EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2026/01/05 12:00 a.m.•41 views

PT-2026-1286

Name of the Vulnerable Software and Affected Versions code-projects Online Product Reservation System version 1.0 Description A security flaw exists in the User Registration Handler component of code-projects Online Product Reservation System version 1.0. The issue involves a SQL injection that c...

9.8CVSS7.1AI score0.00441EPSS
SaveExploits1References11
CNNVD
CNNVD
•added 2026/01/05 12:00 a.m.•28 views

Code-Projects Online Product Reservation System 授权问题漏洞

Code-Projects Online Product Reservation System is an open source online product reservation system from Code-Projects. An authorization issue vulnerability exists in Code-Projects Online Product Reservation System version 1.0, which originates from an attacker being able to remotely bypass...

7.5CVSS7.4AI score0.00568EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2026/01/05 12:00 a.m.•35 views

PT-2026-1260

Name of the Vulnerable Software and Affected Versions code-projects Online Product Reservation System version 1.0 Description A security issue exists in code-projects Online Product Reservation System 1.0. The issue involves the manipulation of the transaction id argument within the GET Parameter...

9.8CVSS6.6AI score0.00441EPSS
SaveExploits1References11
CNNVD
CNNVD
•added 2026/01/05 12:00 a.m.•17 views

Code-Projects Online Music Site 安全漏洞

Code-Projects Online Music Site is an online music site from Code-Projects open source. A security vulnerability exists in Code-Projects Online Music Site version 1.0, which stems from incorrect manipulation of the parameters username/password in the file /login.php, and could lead to a SQL...

9.8CVSS7.6AI score0.00441EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2026/01/05 12:00 a.m.•15 views

Code-Projects Online Product Reservation System SQL注入漏洞

Code-Projects Online Product Reservation System is a Code-Projects open source online product reservation system. A SQL injection vulnerability exists in Code-Projects Online Product Reservation System version 1.0, which stems from incorrect manipulation of the parameter ID in the file...

9.8CVSS6.9AI score0.00367EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2026/01/05 12:00 a.m.•28 views

PT-2026-1273

Name of the Vulnerable Software and Affected Versions code-projects Online Product Reservation System version 1.0 Description A flaw exists in code-projects Online Product Reservation System 1.0 that allows for cross site scripting. The issue is located in an unknown function within the...

6.1CVSS5.3AI score0.00373EPSS
SaveExploits1References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/05 12:00 a.m.•11 views

CVE-2026-0583: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in code-projects Online Product Reservation System 1.0. This vulnerability affects unknown code of the file app/user/login.php of the component User Login. The manipulation of the argument emailadd results in sql injection. The attack may be launched remotely...

9.8CVSS6.9AI score0.00441EPSS
SaveExploits1References1
CVE
CVE
•added 2026/01/04 12:32 p.m.•54 views

CVE-2026-0579

CVE-2026-0579 affects Code-Projects Online Product Reservation System 1.0. A SQL injection exists in the POST Parameter Handler for /handgunner-administrator/edit.php, triggered by manipulating the arguments prod_id, name, price, model, or serial. The vulnerability is exploitable remotely and pub...

9.8CVSS7AI score0.00435EPSS
SaveExploits1References6Affected Software1
Vulnrichment
Vulnrichment
•added 2026/01/04 12:32 p.m.•9 views

CVE-2026-0579 code-projects Online Product Reservation System POST Parameter edit.php sql injection

A vulnerability was found in code-projects Online Product Reservation System 1.0. This affects an unknown part of the file /handgunner-administrator/edit.php of the component POST Parameter Handler. The manipulation of the argument prodid/name/price/model/serial results in sql injection. The atta...

7.5CVSS6.9AI score0.00435EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2026/01/04 12:32 p.m.•44 views

CVE-2026-0579 code-projects Online Product Reservation System POST Parameter edit.php sql injection

A vulnerability was found in code-projects Online Product Reservation System 1.0. This affects an unknown part of the file /handgunner-administrator/edit.php of the component POST Parameter Handler. The manipulation of the argument prodid/name/price/model/serial results in sql injection. The atta...

7.5CVSS0.00435EPSS
SaveExploits1References6
NVD
NVD
•added 2026/01/04 12:15 p.m.•19 views

CVE-2026-0578

A vulnerability has been found in code-projects Online Product Reservation System 1.0. Affected by this issue is some unknown functionality of the file /handgunner-administrator/delete.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The explo...

9.8CVSS0.00543EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2026/01/04 12:02 p.m.•55 views

CVE-2026-0578 code-projects Online Product Reservation System delete.php sql injection

A vulnerability has been found in code-projects Online Product Reservation System 1.0. Affected by this issue is some unknown functionality of the file /handgunner-administrator/delete.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The explo...

7.5CVSS0.00543EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
•added 2026/01/04 12:02 p.m.•7 views

CVE-2026-0578 code-projects Online Product Reservation System delete.php sql injection

A vulnerability has been found in code-projects Online Product Reservation System 1.0. Affected by this issue is some unknown functionality of the file /handgunner-administrator/delete.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The explo...

7.5CVSS6.9AI score0.00543EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2026/01/04 9:32 a.m.•42 views

CVE-2026-0577 code-projects Online Product Reservation System prod.php unrestricted upload

A flaw has been found in code-projects Online Product Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file /handgunner-administrator/prod.php. Executing a manipulation can lead to unrestricted upload. It is possible to launch the attack remotely. The...

6.5CVSS0.0036EPSS
SaveExploits1References6
Rows per page
Query Builder