Lucene search
K

51 matches found

RedhatCVE
RedhatCVE
added 2026/04/03 4:59 p.m.2 views

CVE-2026-5334

A weakness has been identified in itsourcecode Online Enrollment System 1.0. Impacted is an unknown function of the file /enrollment/index.php?view=edit=3 of the component Parameter Handler. This manipulation of the argument deptid causes sql injection. The attack is possible to be carried out...

9.8CVSS6.8AI score0.00037EPSS
Exploits1References1
NVD
NVD
added 2026/04/02 2:16 p.m.2 views

CVE-2026-5334

A weakness has been identified in itsourcecode Online Enrollment System 1.0. Impacted is an unknown function of the file /enrollment/index.php?view=edit&id=3 of the component Parameter Handler. This manipulation of the argument deptid causes sql injection. The attack is possible to be carried out...

9.8CVSS0.00037EPSS
Exploits1References5
CVE
CVE
added 2026/04/02 1:45 p.m.6 views

CVE-2026-5334

The CVE affects itsourcecode Online Enrollment System 1.0. The vulnerable component is the Parameter Handler, specifically the function/handler for /enrollment/index.php?view=edit&id=3 where the deptid argument is manipulated, leading to SQL injection. This vulnerability can be exploited remotely...

9.8CVSS6.8AI score0.00037EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2026/04/02 1:45 p.m.18 views

CVE-2026-5334 itsourcecode Online Enrollment System Parameter index.php sql injection

A weakness has been identified in itsourcecode Online Enrollment System 1.0. Impacted is an unknown function of the file /enrollment/index.php?view=edit&id=3 of the component Parameter Handler. This manipulation of the argument deptid causes sql injection. The attack is possible to be carried out...

7.5CVSS0.00037EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2026/04/02 12:0 a.m.1 views

PT-2026-29745

A weakness has been identified in itsourcecode Online Enrollment System 1.0. Impacted is an unknown function of the file /enrollment/index.php?view=edit&id=3 of the component Parameter Handler. This manipulation of the argument deptid causes sql injection. The attack is possible to be carried out...

7.5CVSS6.8AI score0.00037EPSS
Exploits1References6
CNNVD
CNNVD
added 2026/04/02 12:0 a.m.2 views

itsourcecode Online Enrollment System SQL注入漏洞

itsourcecode Online Enrollment System is an open-source online registration system developed by itsourcecode. Version 1.0 of the itsourcecode Online Enrollment System has a SQL injection vulnerability. This vulnerability stems from improper handling of the parameter “deptid” in the...

9.8CVSS7.2AI score0.00037EPSS
Exploits1References5
RedhatCVE
RedhatCVE
added 2026/03/27 4:59 a.m.1 views

CVE-2026-4842

A security vulnerability has been detected in itsourcecode Online Enrollment System 1.0. This vulnerability affects unknown code of the file /sms/grades/index.php?view=edit=1 of the component Parameter Handler. The manipulation of the argument deptid leads to sql injection. The attack is possible...

7.5CVSS6.9AI score0.00016EPSS
Exploits0References1
EUVD
EUVD
added 2026/03/26 6:30 a.m.1 views

EUVD-2026-16112

A security vulnerability has been detected in itsourcecode Online Enrollment System 1.0. This vulnerability affects unknown code of the file /sms/grades/index.php?view=edit&id=1 of the component Parameter Handler. The manipulation of the argument deptid leads to sql injection. The attack is...

7.5CVSS6.8AI score0.00016EPSS
Exploits0References6
NVD
NVD
added 2026/03/26 5:16 a.m.1 views

CVE-2026-4842

A security vulnerability has been detected in itsourcecode Online Enrollment System 1.0. This vulnerability affects unknown code of the file /sms/grades/index.php?view=edit&id=1 of the component Parameter Handler. The manipulation of the argument deptid leads to sql injection. The attack is...

7.5CVSS0.00016EPSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2026/03/26 4:50 a.m.0 views

CVE-2026-4842

A security vulnerability has been detected in itsourcecode Online Enrollment System 1.0. This vulnerability affects unknown code of the file /sms/grades/index.php?view=edit&id=1 of the component Parameter Handler. The manipulation of the argument deptid leads to sql injection. The attack is...

7.5CVSS6.9AI score0.00016EPSS
Exploits0References5Affected Software1
CVE
CVE
added 2026/03/26 4:50 a.m.16 views

CVE-2026-4842

The CVE-2026-4842 entry concerns the itsourcecode Online Enrollment System 1.0. It targets the parameter handling code in /sms/grades/index.php?view=edit&id=1, where manipulating deptid enables an SQL injection. The vulnerability is exploitable remotely and publicly disclosed. Affected component:...

7.5CVSS6.9AI score0.00016EPSS
Exploits0References5
Cvelist
Cvelist
added 2026/03/26 4:50 a.m.26 views

CVE-2026-4842 itsourcecode Online Enrollment System Parameter index.php sql injection

A security vulnerability has been detected in itsourcecode Online Enrollment System 1.0. This vulnerability affects unknown code of the file /sms/grades/index.php?view=edit&id=1 of the component Parameter Handler. The manipulation of the argument deptid leads to sql injection. The attack is...

7.5CVSS0.00016EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2026/03/26 12:0 a.m.0 views

PT-2026-28207

A security vulnerability has been detected in itsourcecode Online Enrollment System 1.0. This vulnerability affects unknown code of the file /sms/grades/index.php?view=edit&id=1 of the component Parameter Handler. The manipulation of the argument deptid leads to sql injection. The attack is...

7.5CVSS6.8AI score0.00016EPSS
Exploits0References6
CNNVD
CNNVD
added 2026/03/26 12:0 a.m.2 views

itsourcecode Online Enrollment System SQL注入漏洞

itsourcecode Online Enrollment System is an open-source online registration system developed by itsourcecode. Version 1.0 of the itsourcecode Online Enrollment System has a SQL injection vulnerability. This vulnerability arises from incorrect handling of the deptid parameter in the...

7.5CVSS7.2AI score0.00016EPSS
Exploits0References5
CNVD
CNVD
added 2026/01/09 12:0 a.m.4 views

JeecgBoot queryPageList function authorization issue vulnerability

JeecgBoot is a low-code development platform that fuses code generation and AI applications to help organizations rapidly achieve low-code development and build AI applications. JeecgBoot has an authorization issue vulnerability that originates from improper authorization of parameter deptId in t...

3.1CVSS5.9AI score0.00023EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/12/29 5:54 a.m.1 views

CVE-2025-15119

A vulnerability was detected in JeecgBoot up to 3.9.0. This issue affects the function queryPageList of the file /sys/sysDepartRole/list. The manipulation of the argument deptId results in improper authorization. The attack can be executed remotely. A high complexity level is associated with this...

3.1CVSS6.5AI score0.00023EPSS
Exploits1References1
EUVD
EUVD
added 2025/12/28 6:31 a.m.6 views

EUVD-2025-205494

A vulnerability was detected in JeecgBoot up to 3.9.0. This issue affects the function queryPageList of the file /sys/sysDepartRole/list. The manipulation of the argument deptId results in improper authorization. The attack can be executed remotely. A high complexity level is associated with this...

3.1CVSS6.1AI score0.00023EPSS
Exploits1References5
NVD
NVD
added 2025/12/28 4:16 a.m.4 views

CVE-2025-15119

A vulnerability was detected in JeecgBoot up to 3.9.0. This issue affects the function queryPageList of the file /sys/sysDepartRole/list. The manipulation of the argument deptId results in improper authorization. The attack can be executed remotely. A high complexity level is associated with this...

3.1CVSS0.00023EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2025/12/28 3:32 a.m.3 views

CVE-2025-15119 JeecgBoot list queryPageList improper authorization

A vulnerability was detected in JeecgBoot up to 3.9.0. This issue affects the function queryPageList of the file /sys/sysDepartRole/list. The manipulation of the argument deptId results in improper authorization. The attack can be executed remotely. A high complexity level is associated with this...

3.1CVSS3.8AI score0.00023EPSS
Exploits1References4
Cvelist
Cvelist
added 2025/12/28 3:32 a.m.21 views

CVE-2025-15119 JeecgBoot list queryPageList improper authorization

A vulnerability was detected in JeecgBoot up to 3.9.0. This issue affects the function queryPageList of the file /sys/sysDepartRole/list. The manipulation of the argument deptId results in improper authorization. The attack can be executed remotely. A high complexity level is associated with this...

3.1CVSS0.00023EPSS
Exploits1References4
Rows per page
Query Builder