CVE-2026-19996

CVE-2026-19996 affects Webkul Bagisto (up to 2.4.4). The vulnerability resides in the Backend Customer Behavior Data Endpoint, specifically the /admin/customers area, where manipulation of the ID argument leads to improper privilege management. It can be exploited remotely; a public exploit exist...

PT-2023-15568 · Unknown · Tramyardg Hotel-Mgmt-System

Name of the Vulnerable Software and Affected Versions: Tramyardg hotel-mgmt-system version 2022.4 Description: The issue concerns SQL Injection, which can be exploited via the /app/dao/CustomerDAO.php endpoint. This allows for potential unauthorized access or manipulation of data. No information ...