47 matches found
CVE-2026-86276
A flaw has been found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This issue affects some unknown processing of the file db.php. Executing a manipulation can lead to hard-coded credentials. The attack can be executed remotely. The exploit has been published an...
CVE-2026-86276 SourceCodester Syllabus-Aligned Learning Management & Examination System db.php hard-coded credentials
A flaw has been found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This issue affects some unknown processing of the file db.php. Executing a manipulation can lead to hard-coded credentials. The attack can be executed remotely. The exploit has been published an...
CVE-2026-86276
SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0 contains hard-coded credentials in the file db.php , allowing a remote attacker with no privileges to gain unauthorized access. The exact processing affected is described as "unknown" in the advisory. A proof-of-concept ...
PT-2026-86633
A flaw has been found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This issue affects some unknown processing of the file db.php. Executing a manipulation can lead to hard-coded credentials. The attack can be executed remotely. The exploit has been published an...
EUVD-2007-3670
Malware in sbrugna...
EUVD-2022-31184
Malicious code in bioql PyPI...
CVE-2022-26630
Jellycms v3.8.1 and below was discovered to contain an arbitrary file upload vulnerability via \app.\admin\Controllers\db.php...
SQL Injection
prestashop/prestashop is vulnerable to SQL Injection. The vulnerability is due to improper SQL sanitization in Db.php, allowing an authenticated attacker to inject and execute malicious SQL queries into the system...
SQL Injection
prestashop/prestashop is vulnerable to SQL injection. The vulnerability is due to improper sql sanitization in Db.php which allows an attacker to inject and execute malicious SQL queries...
Cross site scripting
A cross-site scripting XSS vulnerability in PHP MySQL Admin Panel Generator v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected at /edit-db.php...
CVE-2022-26630
Jellycms v3.8.1 and below was discovered to contain an arbitrary file upload vulnerability via \app.\admin\Controllers\db.php...
CVE-2022-26630
Jellycms v3.8.1 and below was discovered to contain an arbitrary file upload vulnerability via \app.\admin\Controllers\db.php...
CVE-2022-26630
CVE-2022-26630 affects Jellycms v3.8.1 and earlier. Multiple connected sources confirm an arbitrary file upload vulnerability via the path app/admin/Controllers/db.php, impacting potentially file upload functions. Exploit specifics, affected products beyond JellyCMS, and remediation steps are not...
GPWeb Information Disclosure Vulnerability
GPWeb is a suite of public management software dedicated to the Brazilian government sector. An information disclosure vulnerability exists in the db.php file in GPWeb version 8.4.61. A remote attacker could exploit this vulnerability to view passwords and user databases...
CVE-2017-15877
Insecure Permissions vulnerability in db.php file in GPWeb 8.4.61 allows remote attackers to view the password and user database...
CVE-2017-15877
Insecure Permissions vulnerability in db.php file in GPWeb 8.4.61 allows remote attackers to view the password and user database...
Design/Logic Flaw
Insecure Permissions vulnerability in db.php file in GPWeb 8.4.61 allows remote attackers to view the password and user database...
CVE-2017-15877
Insecure Permissions vulnerability in db.php file in GPWeb 8.4.61 allows remote attackers to view the password and user database...
CVE-2017-15877
The CVE-2017-15877 entry concerns GPWeb 8.4.61, where an Insecure Permissions issue in db.php allows remote attackers to view password and user databases. This is supported by multiple connected records (NVD entry and CNVD/PRION/CVELIST variants) referencing GPWeb 8.4.61 and information disclosur...
