Lucene search
+L

17978 matches found

Cvelist
Cvelist
•added 2026/04/27 1:16 p.m.•56 views

CVE-2026-7127 SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection

A weakness has been identified in SourceCodester Pharmacy Sales and Inventory System 1.0. This vulnerability affects unknown code of the file /ajax.php?action=deletereceiving. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has...

7.5CVSS0.00411EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2026/04/27 1:16 p.m.•10 views

CVE-2026-7127

A weakness has been identified in SourceCodester Pharmacy Sales and Inventory System 1.0. This vulnerability affects unknown code of the file /ajax.php?action=deletereceiving. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has...

7.5CVSS7.3AI score0.00411EPSS
SaveExploits0References5Affected Software1
CVE
CVE
•added 2026/04/27 1:16 p.m.•34 views

CVE-2026-7127

SourceCodester Pharmacy Sales and Inventory System 1.0 is affected by an SQL injection in /ajax.php?action=delete_receiving, triggered by tampering with the ID parameter in that endpoint. The vulnerability is in server-side PHP code handling receiving deletion, with remote exploitation possible a...

7.5CVSS7AI score0.00411EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/04/27 1:16 p.m.•21 views

EUVD-2026-25851

A weakness has been identified in SourceCodester Pharmacy Sales and Inventory System 1.0. This vulnerability affects unknown code of the file /ajax.php?action=deletereceiving. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has...

7.5CVSS7.4AI score0.00411EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/04/27 1:16 p.m.•17 views

CVE-2026-7127 SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection

A weakness has been identified in SourceCodester Pharmacy Sales and Inventory System 1.0. This vulnerability affects unknown code of the file /ajax.php?action=deletereceiving. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has...

7.5CVSS7AI score0.00411EPSS
SaveExploits0References5
NVD
NVD
•added 2026/04/27 11:16 a.m.•28 views

CVE-2026-7115

A vulnerability was identified in code-projects Employee Management System 1.0. This vulnerability affects unknown code of the file 370project/delete.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might ...

6.5CVSS0.00316EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2026/04/27 10:30 a.m.•10 views

CVE-2026-7115

A vulnerability was identified in code-projects Employee Management System 1.0. This vulnerability affects unknown code of the file 370project/delete.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might ...

6.5CVSS6.5AI score0.00316EPSS
SaveExploits0References5Affected Software1
EUVD
EUVD
•added 2026/04/27 10:30 a.m.•20 views

EUVD-2026-25821

A vulnerability was identified in code-projects Employee Management System 1.0. This vulnerability affects unknown code of the file 370project/delete.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might ...

6.5CVSS5.5AI score0.00316EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/04/27 10:30 a.m.•16 views

CVE-2026-7115 code-projects Employee Management System delete.php sql injection

A vulnerability was identified in code-projects Employee Management System 1.0. This vulnerability affects unknown code of the file 370project/delete.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might ...

6.5CVSS6.5AI score0.00316EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/04/27 12:00 a.m.•25 views

PT-2026-35432

A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. The affected element is an unknown function of the file /ajax.php?action=delete category. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit ha...

7.5CVSS7.2AI score0.00411EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2026/04/27 12:00 a.m.•37 views

Code-Projects Employee Management System Injection Vulnerability

Code-Projects Employee Management System is an open-source employee management system developed by Code-Projects. Version 1.0 of the Code-Projects Employee Management System has a SQL injection vulnerability. This vulnerability arises from unknown code in the 370project/delete.php file, which...

6.5CVSS6.6AI score0.00316EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/04/27 12:00 a.m.•22 views

SourceCodester Pharmacy Sales and Inventory System Injection Vulnerability

SourceCodester Pharmacy Sales and Inventory System is an open-source medication sales and inventory management system developed by SourceCodester. Version 1.0 of the SourceCodester Pharmacy Sales and Inventory System has a SQL injection vulnerability, which stems from the handling of parameter ID...

7.5CVSS7.1AI score0.00411EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/04/27 12:00 a.m.•29 views

PT-2026-35543

Name of the Vulnerable Software and Affected Versions SourceCodester Pharmacy Sales and Inventory System version 1.0 Description SQL injection can be initiated remotely via the '/ajax.php?action=delete product' endpoint. The issue occurs when the ID argument is manipulated, allowing for...

7.5CVSS7.1AI score0.00411EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
•added 2026/04/27 12:00 a.m.•27 views

PT-2026-35397

A vulnerability was identified in code-projects Employee Management System 1.0. This vulnerability affects unknown code of the file 370project/delete.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might ...

6.5CVSS6.5AI score0.00316EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2026/04/27 12:00 a.m.•26 views

SourceCodester Pharmacy Sales and Inventory System Injection Vulnerability

SourceCodester Pharmacy Sales and Inventory System is an open-source medication sales and inventory management system developed by SourceCodester. Version 1.0 of the SourceCodester Pharmacy Sales and Inventory System has a SQL injection vulnerability, which stems from the handling of the paramete...

7.5CVSS7.1AI score0.00411EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/04/27 12:00 a.m.•23 views

PT-2026-35421

A weakness has been identified in SourceCodester Pharmacy Sales and Inventory System 1.0. This vulnerability affects unknown code of the file /ajax.php?action=delete receiving. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit ha...

7.5CVSS7.3AI score0.00411EPSS
SaveExploits0References6
NVD
NVD
•added 2026/04/26 9:16 a.m.•26 views

CVE-2026-7028

A security flaw has been discovered in CodeAstro Online Job Portal 1.0. The affected element is an unknown function of the file /admin/jobs-admins/delete-jobs.php of the component All Jobs Page. Performing a manipulation of the argument ID results in sql injection. The attack is possible to be...

5.8CVSS0.00332EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/04/26 8:45 a.m.•63 views

CVE-2026-7028 CodeAstro Online Job Portal All Jobs delete-jobs.php sql injection

A security flaw has been discovered in CodeAstro Online Job Portal 1.0. The affected element is an unknown function of the file /admin/jobs-admins/delete-jobs.php of the component All Jobs Page. Performing a manipulation of the argument ID results in sql injection. The attack is possible to be...

5.8CVSS0.00332EPSS
SaveExploits0References5
CVE
CVE
•added 2026/04/26 8:45 a.m.•42 views

CVE-2026-7028

VULNERABILITY: CVE-2026-7028 affects CodeAstro Online Job Portal 1.0. An SQL injection is possible in the All Jobs Page via manipulation of the ID argument in /admin/jobs-admins/delete-jobs.php. Exploitation is remote and publicly released; impact is limited to low confidentiality/integrity/avail...

5.8CVSS5.4AI score0.00332EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/04/26 8:45 a.m.•27 views

EUVD-2026-25703

A security flaw has been discovered in CodeAstro Online Job Portal 1.0. The affected element is an unknown function of the file /admin/jobs-admins/delete-jobs.php of the component All Jobs Page. Performing a manipulation of the argument ID results in sql injection. The attack is possible to be...

5.8CVSS5AI score0.00332EPSS
SaveExploits0References5
Rows per page
Query Builder