Lucene search
+L

4876 matches found

Positive Technologies
Positive Technologies
•added 2026/09/20 12:00 a.m.•11 views

PT-2026-95948

Name of the Vulnerable Software and Affected Versions code-projects Assessment Management version 1.0 Description Cross site scripting occurs in the User Editing component within the admin/edit-user.php file. A remote attacker can trigger this issue by manipulating the name, sname, email, usernam...

4.8CVSS5.7AI score0.00368EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2026/09/20 12:00 a.m.•12 views

PT-2026-95949

Name of the Vulnerable Software and Affected Versions code-projects Assessment Management version 1.0 Description Cross site scripting occurs in the file admin/add-user.php due to the manipulation of the level argument. This issue allows a remote attack to be launched. Recommendations Avoid using...

4.8CVSS5.5AI score0.00368EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2026/09/20 12:00 a.m.•9 views

PT-2026-95952

Name of the Vulnerable Software and Affected Versions code-projects Internship Management System version 1.0 Description A security flaw allows remote attackers to perform SQL injection, a technique used to manipulate database queries, by manipulating the Password variable within the...

7.5CVSS5.9AI score0.00431EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
•added 2026/09/20 12:00 a.m.•7 views

PT-2026-95951

Name of the Vulnerable Software and Affected Versions code-projects Internship Management System version 1.0 Description A remote SQL injection exists in the /login.php endpoint. This issue occurs when the Password variable is manipulated, allowing an attacker to interfere with the database...

7.5CVSS5.9AI score0.00431EPSS
SaveExploits0References9
NVD
NVD
•added 2026/09/17 6:17 p.m.•18 views

CVE-2026-92926

A vulnerability has been found in code-projects Matrimonial System 1.0. This vulnerability affects the function writepartnerprefs of the file /partnerpreference.php. Such manipulation of the argument education leads to sql injection. The attack can be executed remotely. The exploit has been...

7.5CVSS0.00431EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/09/17 5:30 p.m.•45 views

CVE-2026-92926 code-projects Matrimonial System partner_preference.php writepartnerprefs sql injection

A vulnerability has been found in code-projects Matrimonial System 1.0. This vulnerability affects the function writepartnerprefs of the file /partnerpreference.php. Such manipulation of the argument education leads to sql injection. The attack can be executed remotely. The exploit has been...

7.5CVSS0.00431EPSS
SaveExploits0References6
CVE
CVE
•added 2026/09/17 5:30 p.m.•35 views

CVE-2026-92926

A SQL injection vulnerability exists in code-projects Matrimonial System 1.0 , specifically in the writepartnerprefs function of /partner_preference.php. Manipulating the education argument allows a remote attacker with no authentication to inject SQL, resulting in low impact on confidentiality, ...

7.5CVSS6.9AI score0.00431EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/09/17 5:30 p.m.•23 views

CVE-2026-92926 code-projects Matrimonial System partner_preference.php writepartnerprefs sql injection

A vulnerability has been found in code-projects Matrimonial System 1.0. This vulnerability affects the function writepartnerprefs of the file /partnerpreference.php. Such manipulation of the argument education leads to sql injection. The attack can be executed remotely. The exploit has been...

7.5CVSS6.9AI score0.00431EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/09/17 5:30 p.m.•51 views

EUVD-2026-82340

A vulnerability has been found in code-projects Matrimonial System 1.0. This vulnerability affects the function writepartnerprefs of the file /partnerpreference.php. Such manipulation of the argument education leads to sql injection. The attack can be executed remotely. The exploit has been...

7.5CVSS6.9AI score0.00431EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/09/17 12:00 a.m.•8 views

PT-2026-95025

Name of the Vulnerable Software and Affected Versions code-projects Matrimonial System version 1.0 Description A remote SQL injection exists in the /partner preference.php file. The issue occurs within the writepartnerprefs function when the education variable is manipulated, allowing an attacker...

7.5CVSS6.6AI score0.00431EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/17 12:00 a.m.•8 views

CVE-2026-92926: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in code-projects Matrimonial System 1.0. This vulnerability affects the function writepartnerprefs of the file /partnerpreference.php. Such manipulation of the argument education leads to sql injection. The attack can be executed remotely. The exploit has been...

7.5CVSS6.9AI score0.00431EPSS
SaveExploits0References3
NVD
NVD
•added 2026/09/16 3:19 p.m.•14 views

CVE-2026-92366

A vulnerability was determined in code-projects Matrimonial System 1.0. This affects an unknown part of the file /search.php of the component Regular Search. This manipulation of the argument sex/mothertongue/maritialstatus/country/state/religion/agemin/agemax causes sql injection. The attack can...

7.5CVSS0.00561EPSS
SaveExploits0References14
CVE
CVE
•added 2026/09/16 2:15 p.m.•27 views

CVE-2026-92366

code-projects Matrimonial System 1.0 is vulnerable to SQL injection in the Regular Search component via the /search.php file. Unauthenticated remote attackers can manipulate the arguments sex, mothertongue, maritialstatus, country, state, religion, agemin, and agemax to inject SQL. The impact is ...

7.5CVSS6.9AI score0.00561EPSS
SaveExploits0References14
Cvelist
Cvelist
•added 2026/09/16 2:15 p.m.•40 views

CVE-2026-92366 code-projects Matrimonial System Regular Search search.php sql injection

A vulnerability was determined in code-projects Matrimonial System 1.0. This affects an unknown part of the file /search.php of the component Regular Search. This manipulation of the argument sex/mothertongue/maritialstatus/country/state/religion/agemin/agemax causes sql injection. The attack can...

7.5CVSS0.00561EPSS
SaveExploits0References14
Vulnrichment
Vulnrichment
•added 2026/09/16 2:15 p.m.•18 views

CVE-2026-92366 code-projects Matrimonial System Regular Search search.php sql injection

A vulnerability was determined in code-projects Matrimonial System 1.0. This affects an unknown part of the file /search.php of the component Regular Search. This manipulation of the argument sex/mothertongue/maritialstatus/country/state/religion/agemin/agemax causes sql injection. The attack can...

7.5CVSS6.9AI score0.00561EPSS
SaveExploits0References14
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/16 12:00 a.m.•9 views

CVE-2026-92366: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in code-projects Matrimonial System 1.0. This affects an unknown part of the file /search.php of the component Regular Search. This manipulation of the argument sex/mothertongue/maritialstatus/country/state/religion/agemin/agemax causes sql injection. The attack can...

7.5CVSS6.9AI score0.00561EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/16 12:00 a.m.•7 views

PT-2026-93786

Name of the Vulnerable Software and Affected Versions code-projects Matrimonial System version 1.0 Description An SQL injection issue exists in the Regular Search component within the '/search.php' endpoint. A remote attacker can exploit this by manipulating the sex, mothertongue, maritialstatus,...

7.5CVSS6AI score0.00561EPSS
SaveExploits0References16
NVD
NVD
•added 2026/09/15 5:17 p.m.•18 views

CVE-2026-91854

A vulnerability was identified in code-projects Record Management System 1.0. Affected is an unknown function of the file main/reg.php. Such manipulation of the argument desc leads to cross site scripting. The attack may be launched remotely. The exploit is publicly available and might be used...

5.3CVSS0.0047EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/09/15 4:30 p.m.•14 views

CVE-2026-91854 code-projects Record Management System reg.php cross site scripting

A vulnerability was identified in code-projects Record Management System 1.0. Affected is an unknown function of the file main/reg.php. Such manipulation of the argument desc leads to cross site scripting. The attack may be launched remotely. The exploit is publicly available and might be used...

5.3CVSS3.8AI score0.0047EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/09/15 4:30 p.m.•43 views

CVE-2026-91854 code-projects Record Management System reg.php cross site scripting

A vulnerability was identified in code-projects Record Management System 1.0. Affected is an unknown function of the file main/reg.php. Such manipulation of the argument desc leads to cross site scripting. The attack may be launched remotely. The exploit is publicly available and might be used...

5.3CVSS0.0047EPSS
SaveExploits0References6
Rows per page
Query Builder