31 matches found
CVE-2026-97309
The RepairBuddy computer-repair-shop WordPress plugin, developed by Webful Creations , is vulnerable to a Missing Authorization flaw in versions up to and including 4.1226 . This vulnerability allows an attacker to Retrieve Embedded Sensitive Data from the application. While the technical root ca...
CVE-2026-100509
The RepairBuddy (computer-repair-shop) WordPress plugin, developed by Webful Creations , is vulnerable to Stored Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. This vulnerability affects version 4.1225 and all preceding versions. Exploitation of thi...
CVE-2024-51793
CVE-2024-51793 익스플로잇 도구 문서 📋 개요 CVE-2024-51793은 Computer Repair Shop WordPress 플러그인버전 3.8116 미만에서 발견된 인증되지 않은 임의 파일 업로드 취약점입니다. 이 취약점으로 인해 공격자는 인증 없이 PHP 웹쉘을 포함한 임의의 파일을 업로드할 수 있으며, 취약한 WordPress 사이트에서 원격 코드 실행이 가능해집니다. 🚨 취약점 세부 정보 CVE ID: CVE-2024-51793 취약점 유형: 인증되지 않은 임의 파일 업로드 영향을 받는 플러그인:...
CVE-2026-19021
A security vulnerability has been detected in SourceCodester Computer Repair Shop Management System 1.0. Affected by this issue is some unknown functionality of the file /classes/Master.php?f=deleteproduct. Such manipulation of the argument ID leads to sql injection. It is possible to launch the...
EUVD-2026-53825
A security vulnerability has been detected in SourceCodester Computer Repair Shop Management System 1.0. Affected by this issue is some unknown functionality of the file /classes/Master.php?f=deleteproduct. Such manipulation of the argument ID leads to sql injection. It is possible to launch the...
CVE-2026-19021
SourceCodester Computer Repair Shop Management System 1.0 is affected by a remote SQL injection in the file /classes/Master.php?f=delete_product, caused by manipulated ID parameter. The vulnerability can be exploited without authentication and has publicly disclosed exploit details. No patch/reme...
CVE-2026-19021: Improper Neutralization of Special Elements used in an SQL Command
A security vulnerability has been detected in SourceCodester Computer Repair Shop Management System 1.0. Affected by this issue is some unknown functionality of the file /classes/Master.php?f=deleteproduct. Such manipulation of the argument ID leads to sql injection. It is possible to launch the...
CVE-2026-10263
A vulnerability was found in SourceCodester Computer Repair Shop Management System up to 1.0. Affected is an unknown function of the file /admin/products/manageproduct.php. The manipulation of the argument ID results in sql injection. The attack can be launched remotely. The exploit has been made...
EUVD-2026-33645
A vulnerability was found in SourceCodester Computer Repair Shop Management System up to 1.0. Affected is an unknown function of the file /admin/products/manageproduct.php. The manipulation of the argument ID results in sql injection. The attack can be launched remotely. The exploit has been made...
CVE-2026-10263 SourceCodester Computer Repair Shop Management System manage_product.php sql injection
A vulnerability was found in SourceCodester Computer Repair Shop Management System up to 1.0. Affected is an unknown function of the file /admin/products/manageproduct.php. The manipulation of the argument ID results in sql injection. The attack can be launched remotely. The exploit has been made...
CVE-2026-10263 SourceCodester Computer Repair Shop Management System manage_product.php sql injection
A vulnerability was found in SourceCodester Computer Repair Shop Management System up to 1.0. Affected is an unknown function of the file /admin/products/manageproduct.php. The manipulation of the argument ID results in sql injection. The attack can be launched remotely. The exploit has been made...
PT-2026-45425
A vulnerability was found in SourceCodester Computer Repair Shop Management System up to 1.0. Affected is an unknown function of the file /admin/products/manage product.php. The manipulation of the argument ID results in sql injection. The attack can be launched remotely. The exploit has been mad...
CVE-2026-10263: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in SourceCodester Computer Repair Shop Management System up to 1.0. Affected is an unknown function of the file /admin/products/manageproduct.php. The manipulation of the argument ID results in sql injection. The attack can be launched remotely. The exploit has been made...
CVE-2026-36943
Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerable to SQL injection in the file /rsms/admin/repairs/managerepair.php...
EUVD-2024-52959
Malicious code in bioql PyPI...
CVE-2024-56061
Missing Authorization vulnerability in Ateeq Rafeeq RepairBuddy computer-repair-shop allows Privilege Escalation.This issue affects RepairBuddy: from n/a through = 3.8119...
CVE-2024-51793
Unrestricted Upload of File with Dangerous Type vulnerability in Ateeq Rafeeq RepairBuddy computer-repair-shop allows Upload a Web Shell to a Web Server.This issue affects RepairBuddy: from n/a through = 3.8115...
CVE-2024-56061
Missing Authorization vulnerability in Ateeq Rafeeq RepairBuddy computer-repair-shop allows Privilege Escalation.This issue affects RepairBuddy: from n/a through = 3.8119...
CVE-2024-56061
CVE-2024-56061: Missing Authorization in RepairBuddy CRM WordPress plugin (Webful Creations Computer Repair Shop) enables Privilege Escalation via account takeover for authenticated users. Affected: CRM WordPress Plugin – RepairBuddy, versions up to 3.8119 (per CVE record). Root cause: Missing au...
PT-2024-36696 · Webful Creations · Webful Creations Computer Repair Shop
Name of the Vulnerable Software and Affected Versions: Webful Creations Computer Repair Shop versions n/a through 3.8119 Description: A Missing Authorization vulnerability is present in Webful Creations Computer Repair Shop software, allowing Privilege Escalation. Recommendations: For versions n/...