Lucene search
+L

10 matches found

RedhatCVE
RedhatCVE
•added 2026/04/29 2:49 p.m.•16 views

CVE-2026-7072

A vulnerability was detected in CodePanda Source canteenmanagementsystem 1.0. Affected by this issue is some unknown functionality of the file /api/login.php. The manipulation of the argument Username results in sql injection. The attack can be executed remotely. The exploit is now public and may...

7.5CVSS7.3AI score0.00411EPSS
SaveExploits0References1
NVD
NVD
•added 2026/04/27 1:16 a.m.•22 views

CVE-2026-7072

A vulnerability was detected in CodePanda Source canteenmanagementsystem 1.0. Affected by this issue is some unknown functionality of the file /api/login.php. The manipulation of the argument Username results in sql injection. The attack can be executed remotely. The exploit is now public and may...

7.5CVSS0.00411EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/04/27 12:45 a.m.•6 views

CVE-2026-7072 CodePanda Source canteen_management_system login.php sql injection

A vulnerability was detected in CodePanda Source canteenmanagementsystem 1.0. Affected by this issue is some unknown functionality of the file /api/login.php. The manipulation of the argument Username results in sql injection. The attack can be executed remotely. The exploit is now public and may...

7.5CVSS7.3AI score0.00411EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2026/04/27 12:45 a.m.•9 views

CVE-2026-7072

A vulnerability was detected in CodePanda Source canteenmanagementsystem 1.0. Affected by this issue is some unknown functionality of the file /api/login.php. The manipulation of the argument Username results in sql injection. The attack can be executed remotely. The exploit is now public and may...

7.5CVSS7.3AI score0.00411EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2026/04/27 12:45 a.m.•52 views

CVE-2026-7072 CodePanda Source canteen_management_system login.php sql injection

A vulnerability was detected in CodePanda Source canteenmanagementsystem 1.0. Affected by this issue is some unknown functionality of the file /api/login.php. The manipulation of the argument Username results in sql injection. The attack can be executed remotely. The exploit is now public and may...

7.5CVSS0.00411EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/04/27 12:45 a.m.•18 views

EUVD-2026-25748

A vulnerability was detected in CodePanda Source canteenmanagementsystem 1.0. Affected by this issue is some unknown functionality of the file /api/login.php. The manipulation of the argument Username results in sql injection. The attack can be executed remotely. The exploit is now public and may...

7.5CVSS7.3AI score0.00411EPSS
SaveExploits0References4
CVE
CVE
•added 2026/04/27 12:45 a.m.•42 views

CVE-2026-7072

CVE-2026-7072 affects CodePanda Source canteen_management_system 1.0. The flaw resides in the login component (file /api/login.php), where manipulating the Username parameter enables a SQL injection. The vulnerability is exploitable remotely and the exploit is public. Metrics indicate CVSS metric...

7.5CVSS7.3AI score0.00411EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/04/27 12:00 a.m.•27 views

PT-2026-35283

Name of the Vulnerable Software and Affected Versions CodePanda Source canteen management system version 1.0 Description A SQL injection allows remote attackers to manipulate the Username argument via the '/api/login.php' endpoint. SQL injection is a type of flaw that allows an attacker to...

7.5CVSS7.2AI score0.00411EPSS
SaveExploits0References9
CNNVD
CNNVD
•added 2026/04/27 12:00 a.m.•30 views

CodePanda Source canteen_management_system 注入漏洞

CodePanda Source canteenmanagementsystem is an open-source system developed by CodePanda Source for managing cafeteria operations and dining services. Version 1.0 of CodePanda Source canteenmanagementsystem contains a SQL injection vulnerability. This vulnerability stems from the handling of the...

7.5CVSS7.2AI score0.00411EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/27 12:00 a.m.•2 views

CVE-2026-7072: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in CodePanda Source canteenmanagementsystem 1.0. Affected by this issue is some unknown functionality of the file /api/login.php. The manipulation of the argument Username results in sql injection. The attack can be executed remotely. The exploit is now public and may...

7.5CVSS5.7AI score0.00411EPSS
SaveExploits0References3
Rows per page
Query Builder