Lucene search
K

1123 matches found

Cvelist
Cvelist
added 2026/03/30 4:0 a.m.25 views

CVE-2026-5106 code-projects Exam Form Submission update_fst.php cross site scripting

A flaw has been found in code-projects Exam Form Submission 1.0. The impacted element is an unknown function of the file /admin/updatefst.php. Executing a manipulation of the argument sname can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been...

4.8CVSS0.00191EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2026/03/30 12:0 a.m.3 views

PT-2026-28760

A flaw has been found in code-projects Exam Form Submission 1.0. The impacted element is an unknown function of the file /admin/update fst.php. Executing a manipulation of the argument sname can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been...

4.8CVSS4.2AI score0.00191EPSS
Exploits0References6
Cvelist
Cvelist
added 2026/03/29 6:0 a.m.34 views

CVE-2026-5034 code-projects Accounting System Parameter edit_costumer.php sql injection

A flaw has been found in code-projects Accounting System 1.0. Affected by this issue is some unknown functionality of the file /editcostumer.php of the component Parameter Handler. This manipulation of the argument cosid causes sql injection. It is possible to initiate the attack remotely. The...

7.5CVSS0.00329EPSS
Exploits1References5
Cvelist
Cvelist
added 2026/03/29 5:15 a.m.33 views

CVE-2026-5033 code-projects Accounting System Parameter view_costumer.php sql injection

A vulnerability was detected in code-projects Accounting System 1.0. Affected by this vulnerability is an unknown functionality of the file /viewcostumer.php of the component Parameter Handler. The manipulation of the argument cosid results in sql injection. The attack may be performed from remot...

7.5CVSS0.00342EPSS
Exploits1References5
CNNVD
CNNVD
added 2026/03/29 12:0 a.m.3 views

Code-Projects Simple Food Order System SQL注入漏洞

Code-Projects Simple Food Order System is a simple food ordering system developed by Code-Projects as open source. Version 1.0 of the code-projects Simple Food Order System has a SQL injection vulnerability. This vulnerability arises from an unknown function in the all-orders.php file used by the...

9.8CVSS7.1AI score0.00449EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2026/03/28 11:30 p.m.3 views

CVE-2026-5019 code-projects Simple Food Order System Parameter all-orders.php sql injection

A security vulnerability has been detected in code-projects Simple Food Order System 1.0. Affected by this vulnerability is an unknown functionality of the file all-orders.php of the component Parameter Handler. The manipulation of the argument Status leads to sql injection. The attack may be...

7.5CVSS5.8AI score0.00449EPSS
Exploits1References5
NVD
NVD
added 2026/03/28 11:16 p.m.2 views

CVE-2026-5017

A security flaw has been discovered in code-projects Simple Food Order System 1.0. This impacts an unknown function of the file /all-tickets.php of the component Parameter Handler. Performing a manipulation of the argument Status results in sql injection. The attack can be initiated remotely. The...

9.8CVSS0.00333EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2026/03/28 10:30 p.m.3 views

CVE-2026-5018 code-projects Simple Food Order System Parameter register-router.php sql injection

A weakness has been identified in code-projects Simple Food Order System 1.0. Affected is an unknown function of the file register-router.php of the component Parameter Handler. Executing a manipulation of the argument Name can lead to sql injection. The attack can be launched remotely. The explo...

7.5CVSS5.8AI score0.00345EPSS
Exploits1References5
Cvelist
Cvelist
added 2026/03/28 10:30 p.m.30 views

CVE-2026-5018 code-projects Simple Food Order System Parameter register-router.php sql injection

A weakness has been identified in code-projects Simple Food Order System 1.0. Affected is an unknown function of the file register-router.php of the component Parameter Handler. Executing a manipulation of the argument Name can lead to sql injection. The attack can be launched remotely. The explo...

7.5CVSS0.00345EPSS
Exploits1References5
Cvelist
Cvelist
added 2026/03/28 10:30 p.m.29 views

CVE-2026-5017 code-projects Simple Food Order System Parameter all-tickets.php sql injection

A security flaw has been discovered in code-projects Simple Food Order System 1.0. This impacts an unknown function of the file /all-tickets.php of the component Parameter Handler. Performing a manipulation of the argument Status results in sql injection. The attack can be initiated remotely. The...

7.5CVSS0.00333EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2026/03/28 10:30 p.m.2 views

CVE-2026-5017 code-projects Simple Food Order System Parameter all-tickets.php sql injection

A security flaw has been discovered in code-projects Simple Food Order System 1.0. This impacts an unknown function of the file /all-tickets.php of the component Parameter Handler. Performing a manipulation of the argument Status results in sql injection. The attack can be initiated remotely. The...

7.5CVSS5.8AI score0.00333EPSS
Exploits1References5
CNNVD
CNNVD
added 2026/03/28 12:0 a.m.9 views

Code-Projects Simple Food Order System SQL注入漏洞

Code-Projects Simple Food Order System is a simple food ordering system developed by Code-Projects as open source. Version 1.0 of the Code-Projects Simple Food Order System has a SQL injection vulnerability. This vulnerability stems from an unknown function in the Component Parameter Handler’s fi...

9.8CVSS7.1AI score0.00333EPSS
Exploits1References6
RedhatCVE
RedhatCVE
added 2026/03/27 10:51 p.m.4 views

CVE-2026-4900

A weakness has been identified in code-projects Online Food Ordering System 1.0. This affects an unknown part of the file /dbfood/localhost.sql. This manipulation causes files or directories accessible. The attack can be initiated remotely. The exploit has been made available to the public and...

6.9CVSS5.8AI score0.00433EPSS
Exploits0References1
EUVD
EUVD
added 2026/03/27 9:31 p.m.3 views

EUVD-2026-16805

A security vulnerability has been detected in code-projects Online Reviewer System up to 1.0. Affected is an unknown function of the file /system/system/students/assessments/databank/btnfunctions.php. Such manipulation of the argument Description leads to cross site scripting. The attack may be...

4.8CVSS4.2AI score0.00202EPSS
Exploits0References6
NVD
NVD
added 2026/03/27 7:16 p.m.1 views

CVE-2026-4969

A vulnerability was identified in code-projects Social Networking Site 1.0. The impacted element is an unknown function of the file /home.php of the component Alert Handler. The manipulation of the argument content leads to cross site scripting. Remote exploitation of the attack is possible. The...

5.1CVSS0.00191EPSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2026/03/27 6:24 p.m.1 views

CVE-2026-4970

A security flaw has been discovered in code-projects Social Networking Site 1.0. This affects an unknown function of the file deletephotos.php of the component Endpoint. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been release...

6.5CVSS5.8AI score0.00192EPSS
Exploits0References5Affected Software1
Cvelist
Cvelist
added 2026/03/27 6:24 p.m.32 views

CVE-2026-4969 code-projects Social Networking Site Alert home.php cross site scripting

A vulnerability was identified in code-projects Social Networking Site 1.0. The impacted element is an unknown function of the file /home.php of the component Alert Handler. The manipulation of the argument content leads to cross site scripting. Remote exploitation of the attack is possible. The...

5.1CVSS0.00191EPSS
Exploits0References5
CVE
CVE
added 2026/03/27 6:24 p.m.6 views

CVE-2026-4969

The CVE-2026-4969 entry concerns code-projects Social Networking Site 1.0. The vulnerable element is the /home.php file within the Alert Handler component, where manipulation of the content argument enables Cross-Site Scripting (XSS). Description indicates remote exploitation is possible and that...

5.1CVSS4.4AI score0.00191EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2026/03/27 6:24 p.m.3 views

CVE-2026-4969 code-projects Social Networking Site Alert home.php cross site scripting

A vulnerability was identified in code-projects Social Networking Site 1.0. The impacted element is an unknown function of the file /home.php of the component Alert Handler. The manipulation of the argument content leads to cross site scripting. Remote exploitation of the attack is possible. The...

5.1CVSS4.4AI score0.00191EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2026/03/27 2:25 a.m.2 views

CVE-2026-4909 code-projects Exam Form Submission update_s7.php cross site scripting

A weakness has been identified in code-projects Exam Form Submission 1.0. This impacts an unknown function of the file /admin/updates7.php. This manipulation of the argument sname causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been made available to t...

4.8CVSS4.4AI score0.00279EPSS
Exploits0References5
Rows per page
Query Builder