232428 matches found
CVE-2026-78144 code-projects Barangay Resident Profiling Management System Boarder Management boarders.php authorization
A vulnerability was identified in code-projects Barangay Resident Profiling Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /boarders.php of the component Boarder Management Module. Such manipulation of the argument ID leads to authorization bypass. T...
CVE-2026-78144
An authorization bypass vulnerability exists in the Boarder Management Module of code-projects Barangay Resident Profiling Management System 1.0 , specifically in the file /boarders.php. The root cause is improper handling of the ID argument , which can be manipulated to bypass access controls. T...
CVE-2026-78142
A vulnerability was found in code-projects Barangay Resident Profiling Management System 1.0. This impacts an unknown function of the file /archivedrecords.php of the component Restore/Delete. The manipulation of the argument residentid results in authorization bypass. The attack may be launched...
CVE-2026-78142
CVE-2026-78142 affects code-projects Barangay Resident Profiling Management System 1.0 , an open-source PHP application. The vulnerability resides in the Restore/Delete component of the file /archived_records.php , where manipulation of the resident_id parameter leads to an authorization bypass ....
CVE-2026-78142 code-projects Barangay Resident Profiling Management System Restore/Delete archived_records.php authorization
A vulnerability was found in code-projects Barangay Resident Profiling Management System 1.0. This impacts an unknown function of the file /archivedrecords.php of the component Restore/Delete. The manipulation of the argument residentid results in authorization bypass. The attack may be launched...
CVE-2026-78141
The Tenda CH22 router (version 1.0.0.1) contains a command injection vulnerability within the formexeCommand function of the /goform/exeCommand file. The root cause is the improper neutralization of special elements used in a command, specifically via the manipulation of the cmdinput argument. Th...
CVE-2026-78140
A flaw has been found in Dromara UJCMS up to 10.1.3. The impacted element is the function update of the file src/main/java/com/ujcms/cms/ext/web/backendapi/WebFileTemplateController.java of the component web-file-template Endpoint. Executing a manipulation can lead to improper neutralization of...
EUVD-2026-64664
A flaw has been found in Dromara UJCMS up to 10.1.3. The impacted element is the function update of the file src/main/java/com/ujcms/cms/ext/web/backendapi/WebFileTemplateController.java of the component web-file-template Endpoint. Executing a manipulation can lead to improper neutralization of...
CVE-2026-78140
Dromara UJCMS up to 10.1.3 is affected by a Server-Side Template Injection (SSTI) vulnerability in the update function of WebFileTemplateController.java (web-file-template endpoint). The root cause is improper neutralization of special elements used in the FreeMarker template engine. The attack i...
CVE-2026-78140 Dromara UJCMS web-file-template Endpoint WebFileTemplateController.java update special elements in template engine
A flaw has been found in Dromara UJCMS up to 10.1.3. The impacted element is the function update of the file src/main/java/com/ujcms/cms/ext/web/backendapi/WebFileTemplateController.java of the component web-file-template Endpoint. Executing a manipulation can lead to improper neutralization of...
CVE-2026-78140 Dromara UJCMS web-file-template Endpoint WebFileTemplateController.java update special elements in template engine
A flaw has been found in Dromara UJCMS up to 10.1.3. The impacted element is the function update of the file src/main/java/com/ujcms/cms/ext/web/backendapi/WebFileTemplateController.java of the component web-file-template Endpoint. Executing a manipulation can lead to improper neutralization of...
CVE-2026-78112
A flaw has been found in itsourcecode Hospital Management System Project in PHP 1.0. This impacts an unknown function of the file /viewservicetype.php. This manipulation of the argument delid causes sql injection. The attack may be initiated remotely. The exploit has been published and may be use...
EUVD-2026-64647
A flaw has been found in itsourcecode Hospital Management System Project in PHP 1.0. This impacts an unknown function of the file /viewservicetype.php. This manipulation of the argument delid causes sql injection. The attack may be initiated remotely. The exploit has been published and may be use...
CVE-2026-78112 itsourcecode Hospital Management System Project in PHP viewservicetype.php sql injection
A flaw has been found in itsourcecode Hospital Management System Project in PHP 1.0. This impacts an unknown function of the file /viewservicetype.php. This manipulation of the argument delid causes sql injection. The attack may be initiated remotely. The exploit has been published and may be use...
CVE-2026-78112
A SQL injection vulnerability exists in itsourcecode Hospital Management System Project in PHP 1.0 , specifically in the file /viewservicetype.php through manipulation of the delid parameter. The flaw can be exploited remotely and requires low privileges (authenticated access). CVSS 3.1 scores it...
CVE-2026-78063
A security flaw has been discovered in Tenda CH22 1.0.0.1. The impacted element is the function formeditFileName of the file /goform/editFileName. The manipulation of the argument editNameMit results in command injection. The attack can be launched remotely. The exploit has been released to the...
CVE-2026-78063
A command injection vulnerability exists in Tenda CH22 firmware version 1.0.0.1 . The flaw is in the function formeditFileName within the file /goform/editFileName , where manipulation of the editNameMit argument allows an authenticated remote attacker to inject and execute arbitrary commands. Th...
CVE-2026-78063 Tenda CH22 editFileName formeditFileName command injection
A security flaw has been discovered in Tenda CH22 1.0.0.1. The impacted element is the function formeditFileName of the file /goform/editFileName. The manipulation of the argument editNameMit results in command injection. The attack can be launched remotely. The exploit has been released to the...
CVE-2026-78063 Tenda CH22 editFileName formeditFileName command injection
A security flaw has been discovered in Tenda CH22 1.0.0.1. The impacted element is the function formeditFileName of the file /goform/editFileName. The manipulation of the argument editNameMit results in command injection. The attack can be launched remotely. The exploit has been released to the...