Lucene search
+L

4732 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/29 12:00 a.m.•1 views

CVE-2026-5019: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in code-projects Simple Food Order System 1.0. Affected by this vulnerability is an unknown functionality of the file all-orders.php of the component Parameter Handler. The manipulation of the argument Status leads to sql injection. The attack may be...

9.8CVSS5.5AI score0.00572EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/29 12:00 a.m.•0 views

CVE-2026-5035: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in code-projects Accounting System 1.0. This affects an unknown part of the file /viewwork.php of the component Parameter Handler. Such manipulation of the argument enid leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

9.8CVSS5.5AI score0.00567EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/29 12:00 a.m.•1 views

CVE-2026-5034: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in code-projects Accounting System 1.0. Affected by this issue is some unknown functionality of the file /editcostumer.php of the component Parameter Handler. This manipulation of the argument cosid causes sql injection. It is possible to initiate the attack remotely. The...

9.8CVSS5.5AI score0.00545EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2026/03/29 12:00 a.m.•20 views

Code-Projects Simple Food Order System SQL注入漏洞

Code-Projects Simple Food Order System is a simple food ordering system developed by Code-Projects as open source. Version 1.0 of the code-projects Simple Food Order System has a SQL injection vulnerability. This vulnerability arises from an unknown function in the all-orders.php file used by the...

9.8CVSS7.1AI score0.00572EPSS
SaveExploits1References5
CVE
CVE
•added 2026/03/28 11:30 p.m.•39 views

CVE-2026-5019

The CVE-2026-5019 issue affects code-projects’ Simple Food Order System 1.0, specifically the all-orders.php in the Parameter Handler. The vulnerability arises from manipulating the Status parameter, enabling a SQL injection. A remote attack is possible, and public exploit details have been discl...

9.8CVSS6.9AI score0.00572EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2026/03/28 11:30 p.m.•10 views

CVE-2026-5019 code-projects Simple Food Order System Parameter all-orders.php sql injection

A security vulnerability has been detected in code-projects Simple Food Order System 1.0. Affected by this vulnerability is an unknown functionality of the file all-orders.php of the component Parameter Handler. The manipulation of the argument Status leads to sql injection. The attack may be...

7.5CVSS5.8AI score0.00572EPSS
SaveExploits1References5
NVD
NVD
•added 2026/03/28 11:16 p.m.•15 views

CVE-2026-5017

A security flaw has been discovered in code-projects Simple Food Order System 1.0. This impacts an unknown function of the file /all-tickets.php of the component Parameter Handler. Performing a manipulation of the argument Status results in sql injection. The attack can be initiated remotely. The...

9.8CVSS0.00572EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2026/03/28 11:09 p.m.•10 views

CVE-2026-4972

A security vulnerability has been detected in code-projects Online Reviewer System up to 1.0. Affected is an unknown function of the file /system/system/students/assessments/databank/btnfunctions.php. Such manipulation of the argument Description leads to cross site scripting. The attack may be...

4.8CVSS4.2AI score0.0035EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/03/28 10:30 p.m.•96 views

CVE-2026-5018 code-projects Simple Food Order System Parameter register-router.php sql injection

A weakness has been identified in code-projects Simple Food Order System 1.0. Affected is an unknown function of the file register-router.php of the component Parameter Handler. Executing a manipulation of the argument Name can lead to sql injection. The attack can be launched remotely. The explo...

7.5CVSS0.00572EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2026/03/28 10:30 p.m.•10 views

CVE-2026-5018 code-projects Simple Food Order System Parameter register-router.php sql injection

A weakness has been identified in code-projects Simple Food Order System 1.0. Affected is an unknown function of the file register-router.php of the component Parameter Handler. Executing a manipulation of the argument Name can lead to sql injection. The attack can be launched remotely. The explo...

7.5CVSS5.8AI score0.00572EPSS
SaveExploits1References5
CVE
CVE
•added 2026/03/28 10:30 p.m.•47 views

CVE-2026-5017

CVE-2026-5017 affects code-projects Simple Food Order System 1.0, specifically the Parameter Handler’s file /all-tickets.php. Affected behavior: manipulation of the Status parameter can cause SQL injection, with remote exploitation and the exploit publicly released. Remediation guidance present i...

9.8CVSS6.9AI score0.00572EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2026/03/28 10:30 p.m.•47 views

CVE-2026-5017 code-projects Simple Food Order System Parameter all-tickets.php sql injection

A security flaw has been discovered in code-projects Simple Food Order System 1.0. This impacts an unknown function of the file /all-tickets.php of the component Parameter Handler. Performing a manipulation of the argument Status results in sql injection. The attack can be initiated remotely. The...

7.5CVSS0.00572EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2026/03/28 10:30 p.m.•9 views

CVE-2026-5017 code-projects Simple Food Order System Parameter all-tickets.php sql injection

A security flaw has been discovered in code-projects Simple Food Order System 1.0. This impacts an unknown function of the file /all-tickets.php of the component Parameter Handler. Performing a manipulation of the argument Status results in sql injection. The attack can be initiated remotely. The...

7.5CVSS5.8AI score0.00572EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2026/03/28 12:00 a.m.•17 views

Code-Projects Simple Food Order System SQL注入漏洞

Code-Projects Simple Food Order System is a simple food ordering system developed by Code-Projects as open source. Version 1.0 of the Code-Projects Simple Food Order System has a SQL injection vulnerability. This vulnerability stems from improper handling of parameters by the unknown function in...

9.8CVSS7.1AI score0.00572EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2026/03/28 12:00 a.m.•25 views

Code-Projects Simple Food Order System SQL注入漏洞

Code-Projects Simple Food Order System is a simple food ordering system developed by Code-Projects as open source. Version 1.0 of the Code-Projects Simple Food Order System has a SQL injection vulnerability. This vulnerability stems from an unknown function in the Component Parameter Handler’s fi...

9.8CVSS7.1AI score0.00572EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/28 12:00 a.m.•0 views

CVE-2026-5018: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in code-projects Simple Food Order System 1.0. Affected is an unknown function of the file register-router.php of the component Parameter Handler. Executing a manipulation of the argument Name can lead to sql injection. The attack can be launched remotely. The explo...

9.8CVSS5.5AI score0.00572EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/03/27 10:51 p.m.•16 views

CVE-2026-4900

A weakness has been identified in code-projects Online Food Ordering System 1.0. This affects an unknown part of the file /dbfood/localhost.sql. This manipulation causes files or directories accessible. The attack can be initiated remotely. The exploit has been made available to the public and...

6.9CVSS5.8AI score0.00483EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/03/27 9:31 p.m.•15 views

EUVD-2026-16805

A security vulnerability has been detected in code-projects Online Reviewer System up to 1.0. Affected is an unknown function of the file /system/system/students/assessments/databank/btnfunctions.php. Such manipulation of the argument Description leads to cross site scripting. The attack may be...

4.8CVSS4.2AI score0.0035EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/03/27 9:31 p.m.•17 views

EUVD-2026-16760

A vulnerability was identified in code-projects Social Networking Site 1.0. The impacted element is an unknown function of the file /home.php of the component Alert Handler. The manipulation of the argument content leads to cross site scripting. Remote exploitation of the attack is possible. The...

5.1CVSS4.4AI score0.00331EPSS
SaveExploits0References6
NVD
NVD
•added 2026/03/27 7:16 p.m.•15 views

CVE-2026-4969

A vulnerability was identified in code-projects Social Networking Site 1.0. The impacted element is an unknown function of the file /home.php of the component Alert Handler. The manipulation of the argument content leads to cross site scripting. Remote exploitation of the attack is possible. The...

5.1CVSS0.00331EPSS
SaveExploits0References5
Rows per page
Query Builder