Lucene search
K

3490 matches found

Cvelist
Cvelist
added 2026/01/12 12:2 a.m.26 views

CVE-2026-0852 code-projects Online Music Site AdminUpdateUser.php sql injection

A security flaw has been discovered in code-projects Online Music Site 1.0. The impacted element is an unknown function of the file /Administrator/PHP/AdminUpdateUser.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been...

7.5CVSS0.00048EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2026/01/12 12:2 a.m.2 views

CVE-2026-0852 code-projects Online Music Site AdminUpdateUser.php sql injection

A security flaw has been discovered in code-projects Online Music Site 1.0. The impacted element is an unknown function of the file /Administrator/PHP/AdminUpdateUser.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been...

7.5CVSS6.6AI score0.00048EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2026/01/12 12:0 a.m.4 views

PT-2026-2042

Name of the Vulnerable Software and Affected Versions code-projects Online Music Site version 1.0 Description A security flaw exists in code-projects Online Music Site 1.0. The issue involves a SQL injection impacting an unknown function within the file /Administrator/PHP/AdminUpdateUser.php...

9.8CVSS7.4AI score0.00048EPSS
Exploits1References11
CNNVD
CNNVD
added 2026/01/12 12:0 a.m.1 views

Code-Projects Online Music Site SQL注入漏洞

Code-Projects Online Music Site is a Code-Projects open source online music site. Code-Projects Online Music Site version 1.0 suffers from a SQL injection vulnerability that stems from incorrect manipulation of the parameter txtusername in the file /Administrator/PHP/AdminAddUser.php, which could...

9.8CVSS7.6AI score0.00048EPSS
Exploits1References5
CVE
CVE
added 2026/01/11 11:32 p.m.8 views

CVE-2026-0851

Code-projects Online Music Site 1.0 contains an SQL injection in /Administrator/PHP/AdminAddUser.php via the txtusername parameter. The vulnerability allows remote exploitation and is supported by a publicly available exploit. The issue is tied to an unknown function in AdminAddUser.php and is co...

9.8CVSS7.1AI score0.00048EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2026/01/11 11:32 p.m.24 views

CVE-2026-0851 code-projects Online Music Site AdminAddUser.php sql injection

A vulnerability was identified in code-projects Online Music Site 1.0. The affected element is an unknown function of the file /Administrator/PHP/AdminAddUser.php. The manipulation of the argument txtusername leads to sql injection. Remote exploitation of the attack is possible. The exploit is...

7.5CVSS0.00048EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2026/01/11 11:32 p.m.2 views

CVE-2026-0851 code-projects Online Music Site AdminAddUser.php sql injection

A vulnerability was identified in code-projects Online Music Site 1.0. The affected element is an unknown function of the file /Administrator/PHP/AdminAddUser.php. The manipulation of the argument txtusername leads to sql injection. Remote exploitation of the attack is possible. The exploit is...

7.5CVSS6.7AI score0.00048EPSS
Exploits1References5
OSV
OSV
added 2026/01/11 11:15 p.m.3 views

CVE-2026-0850

A vulnerability was determined in code-projects Intern Membership Management System 1.0. Impacted is an unknown function of the file /admin/deleteactivity.php. Executing a manipulation of the argument activityid can lead to sql injection. The attack may be launched remotely. The exploit has been...

7.2CVSS5.8AI score
Exploits0References5
Cvelist
Cvelist
added 2026/01/11 11:2 p.m.14 views

CVE-2026-0850 code-projects Intern Membership Management System delete_activity.php sql injection

A vulnerability was determined in code-projects Intern Membership Management System 1.0. Impacted is an unknown function of the file /admin/deleteactivity.php. Executing a manipulation of the argument activityid can lead to sql injection. The attack may be launched remotely. The exploit has been...

5.8CVSS0.00047EPSS
Exploits1References5
CVE
CVE
added 2026/01/11 11:2 p.m.6 views

CVE-2026-0850

The CVE-2026-0850 entry applies to the Intern Membership Management System 1.0. The vulnerability affects the /admin/delete_activity.php function where manipulating the activity_id parameter can induce an SQL injection. It is described as exploitable remotely and the exploit has been publicly dis...

7.2CVSS5.2AI score0.00047EPSS
Exploits1References5Affected Software1
RedhatCVE
RedhatCVE
added 2026/01/09 9:36 a.m.6 views

CVE-2024-34954

Code-projects Budget Management 1.0 is vulnerable to Cross Site Scripting XSS via the budget parameter...

6.1CVSS6AI score0.00382EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/01/09 9:35 a.m.6 views

CVE-2024-34955

Code-projects Budget Management 1.0 is vulnerable to SQL Injection via the delete parameter...

9.8CVSS8AI score0.00131EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2026/01/08 9:32 p.m.2 views

CVE-2026-0729 code-projects Intern Membership Management System add_activity.php sql injection

A vulnerability was detected in code-projects Intern Membership Management System 1.0. Impacted is an unknown function of the file /intern/admin/addactivity.php. Performing a manipulation of the argument Title results in sql injection. Remote exploitation of the attack is possible. The exploit is...

5.8CVSS6.6AI score0.00019EPSS
Exploits1References5
Cvelist
Cvelist
added 2026/01/08 9:32 p.m.19 views

CVE-2026-0729 code-projects Intern Membership Management System add_activity.php sql injection

A vulnerability was detected in code-projects Intern Membership Management System 1.0. Impacted is an unknown function of the file /intern/admin/addactivity.php. Performing a manipulation of the argument Title results in sql injection. Remote exploitation of the attack is possible. The exploit is...

5.8CVSS0.00019EPSS
Exploits1References5
Cvelist
Cvelist
added 2026/01/08 8:32 p.m.21 views

CVE-2026-0728 code-projects Intern Membership Management System delete_admin.php sql injection

A security vulnerability has been detected in code-projects Intern Membership Management System 1.0. This issue affects some unknown processing of the file /intern/admin/deleteadmin.php. Such manipulation of the argument adminid leads to sql injection. The attack may be launched remotely. The...

5.8CVSS0.00006EPSS
Exploits1References5
CVE
CVE
added 2026/01/08 8:2 a.m.10 views

CVE-2026-0701

The CVE-2026-0701 issue affects code-projects Intern Membership Management System 1.0, specifically the file /intern/admin/add_admin.php where manipulating the Username parameter enables SQL injection. This is described as remotely exploitable, with exploits publicly available. Connected sources ...

7.2CVSS5.2AI score0.00029EPSS
Exploits1References6Affected Software1
Vulnrichment
Vulnrichment
added 2026/01/08 8:2 a.m.1 views

CVE-2026-0701 code-projects Intern Membership Management System add_admin.php sql injection

A vulnerability was identified in code-projects Intern Membership Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /intern/admin/addadmin.php. The manipulation of the argument Username leads to sql injection. The attack is possible to be carried out...

5.8CVSS6.8AI score0.00029EPSS
Exploits1References5
Cvelist
Cvelist
added 2026/01/08 7:2 a.m.29 views

CVE-2026-0700 code-projects Intern Membership Management System check_admin.php sql injection

A vulnerability was determined in code-projects Intern Membership Management System 1.0. Affected is an unknown function of the file /intern/admin/checkadmin.php. Executing a manipulation of the argument Username can lead to sql injection. The attack can be executed remotely. The exploit has been...

7.5CVSS0.00021EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2026/01/08 7:2 a.m.1 views

CVE-2026-0700 code-projects Intern Membership Management System check_admin.php sql injection

A vulnerability was determined in code-projects Intern Membership Management System 1.0. Affected is an unknown function of the file /intern/admin/checkadmin.php. Executing a manipulation of the argument Username can lead to sql injection. The attack can be executed remotely. The exploit has been...

7.5CVSS6.7AI score0.00021EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2026/01/08 6:32 a.m.1 views

CVE-2026-0699 code-projects Intern Membership Management System edit_activity.php sql injection

A vulnerability was found in code-projects Intern Membership Management System 1.0. This impacts an unknown function of the file /intern/admin/editactivity.php. Performing a manipulation of the argument activityid results in sql injection. Remote exploitation of the attack is possible. The exploi...

5.8CVSS6.4AI score0.00019EPSS
Exploits1References5
Rows per page
Query Builder