Lucene search
+L

4878 matches found

NVD
NVD
•added 2026/10/12 11:17 p.m.•10 views

CVE-2026-108938

A flaw has been found in code-projects Matrimonial System 1.0. This issue affects some unknown processing of the file db/matrimony.sql. This manipulation causes files or directories accessible. The attack can be initiated remotely. The exploit has been published and may be used...

6.9CVSS0.00311EPSS
SaveExploits0References6
NVD
NVD
•added 2026/10/12 11:17 p.m.•15 views

CVE-2026-108937

A vulnerability was detected in code-projects Online Ticket Reservation System 1.0. This vulnerability affects unknown code of the file /database/medallion.sql. The manipulation results in file and directory information exposure. It is possible to launch the attack remotely. The exploit is now...

6.9CVSS0.00329EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/10/12 11:00 p.m.•7 views

CVE-2026-108938 code-projects Matrimonial System matrimony.sql file access

A flaw has been found in code-projects Matrimonial System 1.0. This issue affects some unknown processing of the file db/matrimony.sql. This manipulation causes files or directories accessible. The attack can be initiated remotely. The exploit has been published and may be used...

6.9CVSS5.4AI score0.00311EPSS
SaveExploits0References6
CVE
CVE
•added 2026/10/12 11:00 p.m.•15 views

CVE-2026-108938

A vulnerability exists in code-projects Matrimonial System 1.0 involving the processing of the db/matrimony.sql file. This flaw allows for the remote manipulation of the application to make files or directories accessible to unauthorized parties. The exploit has been published and may be used in ...

6.9CVSS5.4AI score0.00311EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/12 11:00 p.m.•39 views

CVE-2026-108938 code-projects Matrimonial System matrimony.sql file access

A flaw has been found in code-projects Matrimonial System 1.0. This issue affects some unknown processing of the file db/matrimony.sql. This manipulation causes files or directories accessible. The attack can be initiated remotely. The exploit has been published and may be used...

6.9CVSS0.00311EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/12 10:45 p.m.•40 views

CVE-2026-108937 code-projects Online Ticket Reservation System medallion.sql file information disclosure

A vulnerability was detected in code-projects Online Ticket Reservation System 1.0. This vulnerability affects unknown code of the file /database/medallion.sql. The manipulation results in file and directory information exposure. It is possible to launch the attack remotely. The exploit is now...

6.9CVSS0.00329EPSS
SaveExploits0References6
CVE
CVE
•added 2026/10/12 10:45 p.m.•17 views

CVE-2026-108937

A vulnerability exists in the code-projects Online Ticket Reservation System 1.0 affecting the /database/medallion.sql file. This flaw allows for the exposure of file and directory information through remote manipulation. The vulnerability is associated with CWE-538 and CWE-200 . While the specif...

6.9CVSS5.5AI score0.00329EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/12 12:00 a.m.•4 views

CVE-2026-108938: Files or Directories Accessible to External Parties

A flaw has been found in code-projects Matrimonial System 1.0. This issue affects some unknown processing of the file db/matrimony.sql. This manipulation causes files or directories accessible. The attack can be initiated remotely. The exploit has been published and may be used...

6.9CVSS5.4AI score0.00311EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/12 12:00 a.m.•9 views

CVE-2026-108937: Insertion of Sensitive Information into Externally-Accessible File or Directory

A vulnerability was detected in code-projects Online Ticket Reservation System 1.0. This vulnerability affects unknown code of the file /database/medallion.sql. The manipulation results in file and directory information exposure. It is possible to launch the attack remotely. The exploit is now...

6.9CVSS5.5AI score0.00329EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/12 12:00 a.m.•8 views

PT-2026-111010

Name of the Vulnerable Software and Affected Versions Matrimonial System version 1.0 Description A flaw in the processing of the db/matrimony.sql file allows remote attackers to gain unauthorized access to files or directories. Recommendations At the moment, there is no information about a newer...

6.9CVSS5.9AI score0.00311EPSS
SaveExploits0References8
NVD
NVD
•added 2026/10/05 5:17 a.m.•20 views

CVE-2026-105188

A vulnerability was found in code-projects Human Resource Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /views/admin/liveEventHistory.php of the component Live Event History. The manipulation of the argument eventSubject results in cross site...

5.1CVSS0.00199EPSS
SaveExploits0References6
CVE
CVE
•added 2026/10/05 4:00 a.m.•25 views

CVE-2026-105188

The code-projects Human Resource Management System 1.0 is vulnerable to a cross-site scripting (XSS) vulnerability within the Live Event History component. Specifically, manipulating the eventSubject argument in the file /views/admin/liveEventHistory.php allows for the execution of malicious scri...

5.1CVSS3.7AI score0.00199EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/10/05 4:00 a.m.•13 views

CVE-2026-105188 code-projects Human Resource Management System Live Event History liveEventHistory.php cross site scripting

A vulnerability was found in code-projects Human Resource Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /views/admin/liveEventHistory.php of the component Live Event History. The manipulation of the argument eventSubject results in cross site...

5.1CVSS3.7AI score0.00199EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/05 4:00 a.m.•48 views

CVE-2026-105188 code-projects Human Resource Management System Live Event History liveEventHistory.php cross site scripting

A vulnerability was found in code-projects Human Resource Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /views/admin/liveEventHistory.php of the component Live Event History. The manipulation of the argument eventSubject results in cross site...

5.1CVSS0.00199EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/10/05 4:00 a.m.•20 views

EUVD-2026-92248

A vulnerability was found in code-projects Human Resource Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /views/admin/liveEventHistory.php of the component Live Event History. The manipulation of the argument eventSubject results in cross site...

5.1CVSS3.7AI score0.00199EPSS
SaveExploits0References6
NVD
NVD
•added 2026/10/05 1:16 a.m.•25 views

CVE-2026-105173

A flaw has been found in code-projects Human Resource Management 1.0. This affects an unknown part of the file /humanresourcemanagementsystem/src/store/EventStore.php of the component Event Creation. Executing a manipulation of the argument eventSubject can lead to cross site scripting. The attac...

5.1CVSS0.00199EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/10/05 12:15 a.m.•15 views

CVE-2026-105173 code-projects Human Resource Management Event Creation EventStore.php cross site scripting

A flaw has been found in code-projects Human Resource Management 1.0. This affects an unknown part of the file /humanresourcemanagementsystem/src/store/EventStore.php of the component Event Creation. Executing a manipulation of the argument eventSubject can lead to cross site scripting. The attac...

5.1CVSS3.6AI score0.00199EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/05 12:15 a.m.•44 views

CVE-2026-105173 code-projects Human Resource Management Event Creation EventStore.php cross site scripting

A flaw has been found in code-projects Human Resource Management 1.0. This affects an unknown part of the file /humanresourcemanagementsystem/src/store/EventStore.php of the component Event Creation. Executing a manipulation of the argument eventSubject can lead to cross site scripting. The attac...

5.1CVSS0.00199EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/10/05 12:15 a.m.•16 views

EUVD-2026-92153

A flaw has been found in code-projects Human Resource Management 1.0. This affects an unknown part of the file /humanresourcemanagementsystem/src/store/EventStore.php of the component Event Creation. Executing a manipulation of the argument eventSubject can lead to cross site scripting. The attac...

5.1CVSS3.6AI score0.00199EPSS
SaveExploits0References6
CVE
CVE
•added 2026/10/05 12:15 a.m.•20 views

CVE-2026-105173

A cross-site scripting (XSS) vulnerability exists in code-projects Human Resource Management 1.0 . The flaw is located within the Event Creation component, specifically affecting an unknown part of the file /humanresourcemanagementsystem/src/store/EventStore.php. By manipulating the eventSubject ...

5.1CVSS3.6AI score0.00199EPSS
SaveExploits0References6
Rows per page
Query Builder