Lucene search
+L

84161 matches found

ATTACKERKB
ATTACKERKB
added 2026/07/04 8:45 p.m.11 views

CVE-2026-14653

A vulnerability was determined in SourceCodester Simple and Nice Shopping Cart Script 1.0. This impacts an unknown function of the file /admin/mensproductdeletequery.php. This manipulation of the argument userid causes sql injection. Remote exploitation of the attack is possible. The exploit has...

7.5CVSS5.8AI score0.00269EPSS
SaveExploits0References6Affected Software1
NVD
NVD
added 2026/07/04 8:16 p.m.18 views

CVE-2026-14649

A vulnerability was detected in code-projects Online Voting System 1.0. Impacted is the function testinput of the file /saveVote.php. Performing a manipulation of the argument voterName/voterEmail/voterID/selectedCandidate results in sql injection. The attack can be initiated remotely...

7.5CVSS0.00269EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/07/04 7:45 p.m.43 views

CVE-2026-14649 code-projects Online Voting System saveVote.php test_input sql injection

A vulnerability was detected in code-projects Online Voting System 1.0. Impacted is the function testinput of the file /saveVote.php. Performing a manipulation of the argument voterName/voterEmail/voterID/selectedCandidate results in sql injection. The attack can be initiated remotely...

7.5CVSS0.00269EPSS
SaveExploits0References6
CVE
CVE
added 2026/07/04 6:45 p.m.32 views

CVE-2026-14642

SourceCodester Class and Exam Timetabling System 1.0 contains a SQL injection in the /edit_class2.php endpoint caused by unsafely manipulated ID parameter. The vulnerability is remote and publicly exploitable (PoC). CVSS data from multiple sources indicate a NETWORK attack with low complexity and...

7.5CVSS6.9AI score0.00269EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2026/07/04 6:30 p.m.12 views

CVE-2026-14641

A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality of the file /editcourse.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit h...

7.5CVSS6.9AI score0.00266EPSS
SaveExploits0References7Affected Software1
EUVD
EUVD
added 2026/07/04 6:15 p.m.16 views

EUVD-2026-41688

A vulnerability was found in CodeAstro Apartment Visitor Management System 1.0. Affected is an unknown function of the file /index.php of the component Login. Performing a manipulation of the argument Username results in sql injection. Remote exploitation of the attack is possible. The exploit ha...

7.5CVSS6.8AI score0.00263EPSS
SaveExploits0References6
CVE
CVE
added 2026/07/04 6:0 p.m.22 views

CVE-2026-14639

CVE-2026-14639 affects CodeAstro Ecommerce Website 1.0. The vulnerability is an SQL injection in the code path handling the URL /ecommerce-website-php/customer/my_account.php?edit_account, caused by unsafely manipulated parameter c_name. This allows potentially remote attacker access with low pri...

6.5CVSS6.5AI score0.002EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/07/04 5:45 p.m.16 views

EUVD-2026-41685

A flaw has been found in itsourcecode Hospital Management System 1.0. This affects an unknown function of the file /patient.php. This manipulation of the argument editid causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used...

6.5CVSS6.5AI score0.002EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/07/04 5:45 p.m.40 views

CVE-2026-14638 itsourcecode Hospital Management System patient.php sql injection

A flaw has been found in itsourcecode Hospital Management System 1.0. This affects an unknown function of the file /patient.php. This manipulation of the argument editid causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used...

6.5CVSS0.002EPSS
SaveExploits0References6
NVD
NVD
added 2026/07/04 8:16 a.m.14 views

CVE-2026-14619

A flaw has been found in itsourcecode Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file /medicine.php. This manipulation of the argument editid causes sql injection. Remote exploitation of the attack is possible. The exploit has been published and ma...

6.5CVSS0.00204EPSS
SaveExploits0References6
Fedora
Fedora
added 2026/07/04 1:7 a.m.19 views

[SECURITY] Fedora 43 Update: pdns-5.0.6-1.fc43

The PowerDNS Nameserver is a modern, advanced and high performance authoritative-only name server. It is written from scratch and conforms to all relevant DNS standards documents. Furthermore, PowerDNS interfaces with almost any database...

4.3CVSS5.9AI score0.00344EPSS
SaveExploits0
Fedora
Fedora
added 2026/07/04 12:51 a.m.14 views

[SECURITY] Fedora 44 Update: pdns-5.0.6-1.fc44

The PowerDNS Nameserver is a modern, advanced and high performance authoritative-only name server. It is written from scratch and conforms to all relevant DNS standards documents. Furthermore, PowerDNS interfaces with almost any database...

4.3CVSS5.9AI score0.00344EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/07/04 12:0 a.m.24 views

PT-2026-55733

Name of the Vulnerable Software and Affected Versions SourceCodester Simple and Nice Shopping Cart Script version 1.0 Description An issue exists in the /admin/mensproductdeletequery.php file where improper handling of the user id variable allows for SQL injection. This allows a remote attacker t...

7.5CVSS7.2AI score0.00269EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2026/07/04 12:0 a.m.21 views

PT-2026-55686

Name of the Vulnerable Software and Affected Versions itsourcecode Hospital Management System version 1.0 Description A flaw in the /medicine.php file allows for remote exploitation via SQL injection. This occurs when the editid variable is manipulated, potentially allowing an attacker to interfe...

6.5CVSS6.7AI score0.00204EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2026/07/04 12:0 a.m.22 views

PT-2026-55738

Name of the Vulnerable Software and Affected Versions code-projects Assessment Management version 1.0 Description An issue exists in the /lecturer/marking-scheme.php file where improper handling of the smarksrange variable allows for remote SQL injection. SQL injection is a technique where an...

6.5CVSS6.8AI score0.002EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
added 2026/07/04 12:0 a.m.25 views

PT-2026-55737

Name of the Vulnerable Software and Affected Versions code-projects Assessment Management version 1.0 Description An SQL injection flaw exists in the Database Query Handler component due to improper processing of the /lecturer/marking-scheme.php endpoint. A remote attacker can exploit this by...

6.5CVSS6.7AI score0.00204EPSS
SaveExploits0References9
OSV
OSV
added 2026/07/03 1:4 p.m.5 views

SUSE-SU-2026:2749-1 Security update for perl-DBI

This update for perl-DBI fixes the following issues - CVE-2026-9698: DBI versions before 1.648 for Perl saved errors in a limited-sized buffer bsc1267957. - CVE-2026-10879: SQL statements with more than 9 binders can cause an heap overflow bsc1267849...

9.8CVSS6.2AI score0.00485EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/07/03 1:28 a.m.13 views

CVE-2026-12920

The Cookie Banner for GDPR / CCPA – WPLP Cookie Consent plugin for WordPress is vulnerable to generic SQL Injection via the 's' parameter in all versions up to, and including, 4.3.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL...

4.9CVSS5.8AI score0.00292EPSS
SaveExploits0References7
EUVD
EUVD
added 2026/07/03 1:28 a.m.17 views

EUVD-2026-41469

The Cookie Banner for GDPR / CCPA – WPLP Cookie Consent plugin for WordPress is vulnerable to generic SQL Injection via the 's' parameter in all versions up to, and including, 4.3.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL...

4.9CVSS5.8AI score0.00292EPSS
SaveExploits0References6
Fedora
Fedora
added 2026/07/03 12:56 a.m.14 views

[SECURITY] Fedora 44 Update: mysql8.4-8.4.10-1.fc44

MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon mysqld and many different client programs and libraries. The base package contains the standard MySQL client programs and generic MySQL files...

7.5CVSS5.8AI score0.00471EPSS
SaveExploits0
Rows per page
Query Builder