Lucene search
+L

21 matches found

RedhatCVE
RedhatCVE
•added 2026/03/10 2:12 a.m.•22 views

CVE-2026-3765

A vulnerability was identified in itsourcecode University Management System 1.0. This affects an unknown function of the file /attsingleview.php. Such manipulation of the argument dt leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be used...

9.8CVSS7.2AI score0.00343EPSS
SaveExploits1References1
NVD
NVD
•added 2026/03/08 8:15 p.m.•25 views

CVE-2026-3765

A vulnerability was identified in itsourcecode University Management System 1.0. This affects an unknown function of the file /attsingleview.php. Such manipulation of the argument dt leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be used...

9.8CVSS0.00343EPSS
SaveExploits1References5
osv_cve
osv_cve
•added 2026/03/08 8:15 p.m.•21 views

CVE-2026-3765

A vulnerability was identified in itsourcecode University Management System 1.0. This affects an unknown function of the file /attsingleview.php. Such manipulation of the argument dt leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be used...

9.8CVSS7.2AI score0.00343EPSS
SaveExploits1References5
CVE
CVE
•added 2026/03/08 8:02 p.m.•53 views

CVE-2026-3765

A vulnerability is identified in itsourcecode University Management System 1.0 affecting the file /att_single_view.php. The issue stems from manipulation of the dt argument, enabling SQL injection. Exploitation can be performed remotely, and public exploits exist. Multiple connected sources (NVD,...

9.8CVSS7.2AI score0.00343EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2026/03/08 8:02 p.m.•17 views

CVE-2026-3765 itsourcecode University Management System att_single_view.php sql injection

A vulnerability was identified in itsourcecode University Management System 1.0. This affects an unknown function of the file /attsingleview.php. Such manipulation of the argument dt leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be used...

7.5CVSS7.2AI score0.00343EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2026/03/08 12:00 a.m.•32 views

PT-2026-23976

Name of the Vulnerable Software and Affected Versions itsourcecode University Management System version 1.0 Description A flaw exists in itsourcecode University Management System that allows for remote code execution. The issue is related to the manipulation of the dt argument within the /att...

9.8CVSS7.7AI score0.00343EPSS
SaveExploits1References12
RedhatCVE
RedhatCVE
•added 2026/03/03 7:42 a.m.•31 views

CVE-2026-3412

A vulnerability was detected in itsourcecode University Management System 1.0. This affects an unknown part of the file /attsingleview.php. The manipulation of the argument dt results in cross site scripting. The attack can be executed remotely. The exploit is now public and may be used...

6.1CVSS3.6AI score0.00281EPSS
SaveExploits1References1
CVE
CVE
•added 2026/03/02 5:32 a.m.•57 views

CVE-2026-3412

The CVE-2026-3412 entry concerns itsourcecode University Management System 1.0. The vulnerability is in /att_single_view.php where manipulating the dt parameter yields cross-site scripting (XSS). It is exploitable remotely, with the exploit publicly available, and CVSS data indicates a MEDIUM imp...

6.1CVSS3.6AI score0.00281EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2026/03/02 5:32 a.m.•12 views

CVE-2026-3412 itsourcecode University Management System att_single_view.php cross site scripting

A vulnerability was detected in itsourcecode University Management System 1.0. This affects an unknown part of the file /attsingleview.php. The manipulation of the argument dt results in cross site scripting. The attack can be executed remotely. The exploit is now public and may be used...

5.3CVSS3.6AI score0.00281EPSS
SaveExploits1References5
EUVD
EUVD
•added 2026/03/02 5:32 a.m.•27 views

EUVD-2026-9145

A vulnerability was detected in itsourcecode University Management System 1.0. This affects an unknown part of the file /attsingleview.php. The manipulation of the argument dt results in cross site scripting. The attack can be executed remotely. The exploit is now public and may be used...

5.3CVSS3.6AI score0.00281EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2026/03/02 5:32 a.m.•55 views

CVE-2026-3412 itsourcecode University Management System att_single_view.php cross site scripting

A vulnerability was detected in itsourcecode University Management System 1.0. This affects an unknown part of the file /attsingleview.php. The manipulation of the argument dt results in cross site scripting. The attack can be executed remotely. The exploit is now public and may be used...

5.3CVSS0.00281EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2026/03/02 12:00 a.m.•29 views

PT-2026-22543

A vulnerability was detected in itsourcecode University Management System 1.0. This affects an unknown part of the file /att single view.php. The manipulation of the argument dt results in cross site scripting. The attack can be executed remotely. The exploit is now public and may be used...

5.3CVSS3.6AI score0.00281EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2026/03/02 12:00 a.m.•26 views

Itsourcecode University Management System Code Injection Vulnerability

itsourcecode University Management System is an open-source university management system developed by itsourcecode. Version 1.0 of itsourcecode University Management System has a code injection vulnerability. This vulnerability stems from incorrect handling of the parameter “dt” in the file...

6.1CVSS5AI score0.00281EPSS
SaveExploits1References6
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•32 views

EUVD-2025-29206

Malicious code in bioql PyPI...

6.5CVSS5.8AI score0.00263EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2025/09/17 12:49 a.m.•32 views

CVE-2025-52048

In Frappe 15.x.x before 15.72.0 and 14.x.x before 14.96.10, in the function addtag at frappe/desk/doctype/tag/tag.py is vulnerable to SQL Injection, which allows an attacker to extract information from databases by injecting a SQL query into the dt parameter...

6.5CVSS5.9AI score0.00263EPSS
SaveExploits1References1
NVD
NVD
•added 2025/09/15 4:15 p.m.•24 views

CVE-2025-52048

In Frappe 15.x.x before 15.72.0 and 14.x.x before 14.96.10, in the function addtag at frappe/desk/doctype/tag/tag.py is vulnerable to SQL Injection, which allows an attacker to extract information from databases by injecting a SQL query into the dt parameter...

6.5CVSS0.00263EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2025/09/15 12:00 a.m.•31 views

CVE-2025-52048

In Frappe 15.x.x before 15.72.0 and 14.x.x before 14.96.10, in the function addtag at frappe/desk/doctype/tag/tag.py is vulnerable to SQL Injection, which allows an attacker to extract information from databases by injecting a SQL query into the dt parameter...

0.00263EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/15 12:00 a.m.•7 views

CVE-2025-52048: Improper Neutralization of Special Elements used in an SQL Command

In Frappe 15.x.x before 15.72.0 and 14.x.x before 14.96.10, in the function addtag at frappe/desk/doctype/tag/tag.py is vulnerable to SQL Injection, which allows an attacker to extract information from databases by injecting a SQL query into the dt parameter...

6.5CVSS5.9AI score0.00263EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2025/09/15 12:00 a.m.•25 views

CVE-2025-52048

In Frappe 15.x.x before 15.72.0 and 14.x.x before 14.96.10, in the function addtag at frappe/desk/doctype/tag/tag.py is vulnerable to SQL Injection, which allows an attacker to extract information from databases by injecting a SQL query into the dt parameter...

6.5CVSS5.9AI score0.00382EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/09/15 12:00 a.m.•54 views

PT-2025-37718

Name of the Vulnerable Software and Affected Versions Frappe versions prior to 15.72.0 Frappe versions prior to 14.96.10 Description The add tag function at frappe/desk/doctype/tag/tag.py is susceptible to SQL Injection. This allows an attacker to extract information from databases by injecting a...

6.5CVSS5.8AI score0.00263EPSS
SaveExploits1References7
Rows per page
Query Builder