Lucene search
+L

3573 matches found

Nuclei
Nuclei
added yesterday63 views

Code-Projects School Fees Payment System 1.0 - SQL Injection

A vulnerability was found in code-projects School Fees Payment System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /student.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been...

9.8CVSS7AI score0.01686EPSS
SaveExploits1References5
EUVD
EUVD
added 5 days ago10 views

EUVD-2026-54971

A vulnerability was found in code-projects Task Management System 1.0. This issue affects some unknown processing of the file /user/CommentSave.php. The manipulation of the argument comment/taskid/mineId/recId/myName/myImage results in cross site scripting. It is possible to launch the attack...

5.3CVSS4AI score0.00347EPSS
SaveExploits0References7
Cvelist
Cvelist
added 6 days ago33 views

CVE-2026-19378 code-projects Task Management System CommentSave.php cross site scripting

A vulnerability was found in code-projects Task Management System 1.0. This issue affects some unknown processing of the file /user/CommentSave.php. The manipulation of the argument comment/taskid/mineId/recId/myName/myImage results in cross site scripting. It is possible to launch the attack...

5.3CVSS0.00347EPSS
SaveExploits0References6
NVD
NVD
added 6 days ago8 views

CVE-2026-19345

A vulnerability was found in code-projects Task Management System 1.0. This affects an unknown part of the file /user/UpdateTaskStatus.php. The manipulation of the argument taskid/val results in missing authorization. It is possible to launch the attack remotely. The exploit has been made public...

6.9CVSS0.00524EPSS
SaveExploits0References6
CVE
CVE
added 6 days ago44 views

CVE-2026-19345

In code-projects Task Management System 1.0, the vulnerable component is the file /user/UpdateTaskStatus.php. The issue arises from manipulation of the arguments task_id/val, leading to missing authorization. It enables remote exploitation, and the exploit has been made public. No remediation ste...

6.9CVSS6.3AI score0.00524EPSS
SaveExploits0References6
Cvelist
Cvelist
added 6 days ago35 views

CVE-2026-19344 code-projects Task Management System comment_count_user.php sql injection

A vulnerability has been found in code-projects Task Management System 1.0. Affected by this issue is some unknown functionality of the file /user/commentcountuser.php. The manipulation of the argument taskid leads to sql injection. It is possible to initiate the attack remotely. The exploit has...

7.5CVSS0.00412EPSS
SaveExploits0References6
CVE
CVE
added 6 days ago38 views

CVE-2026-19344

CVE-2026-19344 affects the Code-Projects Task Management System 1.0. The vulnerability lies in the /user/comment_count_user.php component, where controlling the task_id parameter enables SQL injection. Exploitation is described as remote and the public exploit is disclosed; exploit maturity is la...

7.5CVSS7.2AI score0.00412EPSS
SaveExploits0References6
NVD
NVD
added 6 days ago8 views

CVE-2026-19342

A vulnerability was detected in code-projects Task Management System 1.0. Affected is an unknown function of the file /index.php of the component Login. Performing a manipulation of the argument Password results in improper authentication. The attack is possible to be carried out remotely. The...

7.3CVSS0.00405EPSS
SaveExploits0References6
CVE
CVE
added 6 days ago44 views

CVE-2026-19343

Code-projects Task Management System 1.0 contains an SQL injection in the file /admin/AdminLogin.php when manipulating the login arguments email/password. The issue is remote-exploitable and has a published exploit. Affected functionality is unknown in scope beyond AdminLogin input handling; no v...

7.5CVSS7.2AI score0.00263EPSS
SaveExploits0References6
Cvelist
Cvelist
added 6 days ago37 views

CVE-2026-19343 code-projects Task Management System AdminLogin.php sql injection

A flaw has been found in code-projects Task Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/AdminLogin.php. Executing a manipulation of the argument email/password can lead to sql injection. The attack may be performed from remote. The exploit...

7.5CVSS0.00263EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/07/19 6:15 a.m.46 views

CVE-2026-16220 code-projects Online Examination System account.php cross site scripting

A vulnerability has been found in code-projects Online Examination System 1.0. This vulnerability affects unknown code of the file /account.php?q=quiz. Such manipulation of the argument eid/n/t leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to t...

5.3CVSS0.00273EPSS
SaveExploits0References6
NVD
NVD
added 2026/07/14 7:16 a.m.14 views

CVE-2026-15678

A security vulnerability has been detected in code-projects Online Job Portal 1.0. This impacts an unknown function of the file /Admin/DetailJob.php. The manipulation leads to cross site scripting. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may ...

5.1CVSS0.00199EPSS
SaveExploits0References6
NVD
NVD
added 2026/07/14 7:16 a.m.13 views

CVE-2026-15677

A weakness has been identified in code-projects Online Job Portal 1.0. This affects an unknown function of the file /JobSeekerInsert.php. Executing a manipulation of the argument txtFile can lead to unrestricted upload. The attack can be executed remotely. The exploit has been made available to t...

7.5CVSS0.00288EPSS
SaveExploits0References6
CVE
CVE
added 2026/07/14 6:30 a.m.22 views

CVE-2026-15678

Code-projects Online Job Portal 1.0 is affected by a cross-site scripting vulnerability in the /Admin/DetailJob.php component. The issue arises from input handling in an unknown function, enabling remote attackers to exploit XSS. Exploit has been publicly disclosed and may be used. No remediation...

5.1CVSS4.6AI score0.00199EPSS
SaveExploits0References6
NVD
NVD
added 2026/07/14 6:17 a.m.12 views

CVE-2026-15676

A security flaw has been discovered in code-projects Online Job Portal up to 1.0. The impacted element is an unknown function of the file /Admin/DeleteUser.php. Performing a manipulation results in sql injection. Remote exploitation of the attack is possible. The exploit has been released to the...

7.5CVSS0.00263EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/07/14 6:15 a.m.37 views

CVE-2026-15677 code-projects Online Job Portal JobSeekerInsert.php unrestricted upload

A weakness has been identified in code-projects Online Job Portal 1.0. This affects an unknown function of the file /JobSeekerInsert.php. Executing a manipulation of the argument txtFile can lead to unrestricted upload. The attack can be executed remotely. The exploit has been made available to t...

7.5CVSS0.00288EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2026/07/14 6:15 a.m.7 views

CVE-2026-15677

A weakness has been identified in code-projects Online Job Portal 1.0. This affects an unknown function of the file /JobSeekerInsert.php. Executing a manipulation of the argument txtFile can lead to unrestricted upload. The attack can be executed remotely. The exploit has been made available to t...

7.5CVSS6.8AI score0.00288EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
added 2026/07/14 6:0 a.m.35 views

CVE-2026-15676 code-projects Online Job Portal DeleteUser.php sql injection

A security flaw has been discovered in code-projects Online Job Portal up to 1.0. The impacted element is an unknown function of the file /Admin/DeleteUser.php. Performing a manipulation results in sql injection. Remote exploitation of the attack is possible. The exploit has been released to the...

7.5CVSS0.00263EPSS
SaveExploits0References6
CVE
CVE
added 2026/07/14 6:0 a.m.29 views

CVE-2026-15676

CVE-2026-15676 affects code-projects Online Job Portal (

7.5CVSS6.7AI score0.00263EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2026/07/14 6:0 a.m.9 views

CVE-2026-15676

A security flaw has been discovered in code-projects Online Job Portal up to 1.0. The impacted element is an unknown function of the file /Admin/DeleteUser.php. Performing a manipulation results in sql injection. Remote exploitation of the attack is possible. The exploit has been released to the...

7.5CVSS6.7AI score0.00263EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder