Lucene search
+L

4732 matches found

Vulnrichment
Vulnrichment
•added 2026/04/05 3:45 a.m.•5 views

CVE-2026-5540 code-projects Simple Laundry System Parameter modifymember.php sql injection

A vulnerability has been found in code-projects Simple Laundry System 1.0. This vulnerability affects unknown code of the file /modifymember.php of the component Parameter Handler. Such manipulation of the argument firstName leads to sql injection. The attack can be launched remotely. The exploit...

7.5CVSS6.9AI score0.00411EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/04/05 3:45 a.m.•49 views

CVE-2026-5540 code-projects Simple Laundry System Parameter modifymember.php sql injection

A vulnerability has been found in code-projects Simple Laundry System 1.0. This vulnerability affects unknown code of the file /modifymember.php of the component Parameter Handler. Such manipulation of the argument firstName leads to sql injection. The attack can be launched remotely. The exploit...

7.5CVSS0.00411EPSS
SaveExploits0References5
CVE
CVE
•added 2026/04/05 3:30 a.m.•40 views

CVE-2026-5539

CVE-2026-5539 affects code-projects’ Simple Laundry System 1.0, specifically an issue in the Parameter Handler’s /modifymember.php. Manipulation of the firstName argument enables cross-site scripting (XSS). The vulnerability can be triggered remotely, and an exploit has been published. The provid...

5.3CVSS4.4AI score0.00449EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/05 12:00 a.m.•1 views

CVE-2026-5539: Improper Neutralization of Input During Web Page Generation

A flaw has been found in code-projects Simple Laundry System 1.0. This affects an unknown part of the file /modifymember.php of the component Parameter Handler. This manipulation of the argument firstName causes cross site scripting. The attack can be initiated remotely. The exploit has been...

5.3CVSS3.9AI score0.00449EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/05 12:00 a.m.•2 views

CVE-2026-5555: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in code-projects Concert Ticket Reservation System 1.0. This affects an unknown part of the file /ConcertTicketReservationSystem-master/login.php of the component Parameter Handler. Executing a manipulation of the argument Email can lead to sql injection. The attack...

7.5CVSS5.5AI score0.00411EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/05 12:00 a.m.•2 views

CVE-2026-5565: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in code-projects Simple Laundry System 1.0. Affected by this issue is some unknown functionality of the file /delmemberinfo.php of the component Parameter Handler. Such manipulation of the argument userid leads to sql injection. The attack may be launche...

7.5CVSS5.5AI score0.00411EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/05 12:00 a.m.•2 views

CVE-2026-5564: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in code-projects Simple Laundry System 1.0. Affected by this vulnerability is an unknown functionality of the file /searchguest.php of the component Parameter Handler. This manipulation of the argument searchServiceId causes sql injection. The attack may be initiate...

7.5CVSS5.6AI score0.00411EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/04/01 10:58 a.m.•12 views

CVE-2026-5196

A vulnerability has been found in code-projects Student Membership System 1.0. Impacted is an unknown function of the file /deletemember.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be...

6.5CVSS6.5AI score0.00316EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/04/01 6:00 a.m.•49 views

CVE-2026-5257 code-projects Simple Laundry System Parameter delstaffinfo.php sql injection

A vulnerability has been found in code-projects Simple Laundry System 1.0. This issue affects some unknown processing of the file /delstaffinfo.php of the component Parameter Handler. Such manipulation of the argument userid leads to sql injection. The attack can be executed remotely. The exploit...

7.5CVSS0.00572EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2026/04/01 6:00 a.m.•6 views

CVE-2026-5256 code-projects Simple Laundry System Parameter modify.php sql injection

A flaw has been found in code-projects Simple Laundry System 1.0. This vulnerability affects unknown code of the file /modify.php of the component Parameter Handler. This manipulation of the argument firstName causes sql injection. Remote exploitation of the attack is possible. The exploit has be...

7.5CVSS6.8AI score0.00572EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2026/04/01 5:15 a.m.•11 views

CVE-2026-5255 code-projects Simple Laundry System Parameter delstaffinfo.php cross site scripting

A vulnerability was detected in code-projects Simple Laundry System 1.0. This affects an unknown part of the file /delstaffinfo.php of the component Parameter Handler. The manipulation of the argument userid results in cross site scripting. The attack may be launched remotely. The exploit is now...

5.3CVSS4.4AI score0.00459EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2026/04/01 5:15 a.m.•50 views

CVE-2026-5255 code-projects Simple Laundry System Parameter delstaffinfo.php cross site scripting

A vulnerability was detected in code-projects Simple Laundry System 1.0. This affects an unknown part of the file /delstaffinfo.php of the component Parameter Handler. The manipulation of the argument userid results in cross site scripting. The attack may be launched remotely. The exploit is now...

5.3CVSS0.00459EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/01 12:00 a.m.•1 views

CVE-2026-5256: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in code-projects Simple Laundry System 1.0. This vulnerability affects unknown code of the file /modify.php of the component Parameter Handler. This manipulation of the argument firstName causes sql injection. Remote exploitation of the attack is possible. The exploit has be...

9.8CVSS5.5AI score0.00572EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2026/04/01 12:00 a.m.•17 views

Code-Projects Simple Laundry System SQL注入漏洞

Code-Projects Simple Laundry System is an open-source system developed by Code-Projects, designed for managing laundry shop operations. It offers features such as order management, customer management, and inventory management. Version 1.0 of Code-Projects Simple Laundry System contains a SQL...

9.8CVSS7.2AI score0.00572EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/01 12:00 a.m.•2 views

CVE-2026-5257: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in code-projects Simple Laundry System 1.0. This issue affects some unknown processing of the file /delstaffinfo.php of the component Parameter Handler. Such manipulation of the argument userid leads to sql injection. The attack can be executed remotely. The exploit...

9.8CVSS5.5AI score0.00572EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2026/04/01 12:00 a.m.•12 views

PT-2026-29475

A vulnerability has been found in code-projects Simple Laundry System 1.0. This issue affects some unknown processing of the file /delstaffinfo.php of the component Parameter Handler. Such manipulation of the argument userid leads to sql injection. The attack can be executed remotely. The exploit...

7.5CVSS6.8AI score0.00572EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/01 12:00 a.m.•2 views

CVE-2026-5255: Improper Neutralization of Input During Web Page Generation

A vulnerability was detected in code-projects Simple Laundry System 1.0. This affects an unknown part of the file /delstaffinfo.php of the component Parameter Handler. The manipulation of the argument userid results in cross site scripting. The attack may be launched remotely. The exploit is now...

6.1CVSS4AI score0.00459EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2026/04/01 12:00 a.m.•16 views

Code-Projects Simple Laundry System SQL注入漏洞

Code-Projects Simple Laundry System is an open-source system developed by Code-Projects, designed for managing laundry shop operations. It offers features such as order management, customer management, and inventory management. Version 1.0 of Code-Projects Simple Laundry System contains a SQL...

9.8CVSS7.2AI score0.00572EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2026/03/31 5:30 p.m.•51 views

CVE-2026-5206 code-projects Simple Gym Management System Payment sql injection

A security vulnerability has been detected in code-projects Simple Gym Management System 1.0. This vulnerability affects unknown code of the component Payment Handler. The manipulation of the argument Paymentid/Amount/customerid/paymenttype/customername leads to sql injection. Remote exploitation...

6.5CVSS0.00316EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/03/31 11:00 a.m.•44 views

CVE-2026-5198 code-projects Student Membership System Admin Login index.php sql injection

A vulnerability was determined in code-projects Student Membership System 1.0. The impacted element is an unknown function of the file /admin/index.php of the component Admin Login. This manipulation of the argument username/password causes sql injection. Remote exploitation of the attack is...

7.5CVSS0.00411EPSS
SaveExploits0References5
Rows per page
Query Builder