Lucene search
+L

226061 matches found

Cvelist
Cvelist
added 2026/08/20 3:30 p.m.37 views

CVE-2026-76998 SourceCodester Simple Online Food Ordering System ajax.php delete_category sql injection

A security vulnerability has been detected in SourceCodester Simple Online Food Ordering System 1.0. The impacted element is an unknown function of the file /admin/ajax.php?action=deletecategory. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack...

7.5CVSS0.00263EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/08/20 3:30 p.m.11 views

EUVD-2026-63395

A security vulnerability has been detected in SourceCodester Simple Online Food Ordering System 1.0. The impacted element is an unknown function of the file /admin/ajax.php?action=deletecategory. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack...

7.5CVSS7.3AI score0.00263EPSS
SaveExploits0References6
CVE
CVE
added 2026/08/20 3:30 p.m.10 views

CVE-2026-76998

CVE-2026-76998 is a SQL injection vulnerability in SourceCodester Simple Online Food Ordering System 1.0 , located in the file /admin/ajax.php when the action=delete_category parameter is used. Manipulation of the ID argument allows an unauthenticated remote attacker to inject SQL commands. The v...

7.5CVSS7.2AI score0.00263EPSS
SaveExploits0References6
NVD
NVD
added 2026/08/20 3:18 p.m.8 views

CVE-2026-76996

A security flaw has been discovered in SourceCodester Simple Online Food Ordering System 1.0. Impacted is an unknown function of the file /fos/admin/vieworder.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit has been released ...

7.5CVSS0.00263EPSS
SaveExploits0References6
NVD
NVD
added 2026/08/20 3:18 p.m.7 views

CVE-2026-76995

A vulnerability was identified in SourceCodester Simple Online Food Ordering System 1.0. This issue affects some unknown processing of the file /admin/ajax.php?action=savemenu. The manipulation of the argument img leads to unrestricted upload. The attack is possible to be carried out remotely. Th...

5.8CVSS0.00227EPSS
SaveExploits0References6
NVD
NVD
added 2026/08/20 3:18 p.m.8 views

CVE-2026-76991

A vulnerability was found in itsourcecode Hospital Management System 1.0. This affects an unknown part of the file /viewappointmentapproved.php. Performing a manipulation of the argument delid results in sql injection. Remote exploitation of the attack is possible. The exploit has been made publi...

6.5CVSS0.002EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/08/20 3:15 p.m.10 views

EUVD-2026-63394

A weakness has been identified in SourceCodester Simple Online Food Ordering System 1.0. The affected element is an unknown function of the file /admin/ajax.php?action=savecategory. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The...

6.5CVSS6.5AI score0.002EPSS
SaveExploits0References6
CVE
CVE
added 2026/08/20 3:15 p.m.16 views

CVE-2026-76997

CVE-2026-76997 is a SQL injection vulnerability in SourceCodester Simple Online Food Ordering System 1.0 , located in the file /admin/ajax.php?action=save_category. Manipulation of the ID parameter allows a remote, authenticated attacker to inject SQL queries. The vulnerability is rated MEDIUM se...

6.5CVSS6.5AI score0.002EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/08/20 3:15 p.m.28 views

CVE-2026-76997 SourceCodester Simple Online Food Ordering System ajax.php save_category sql injection

A weakness has been identified in SourceCodester Simple Online Food Ordering System 1.0. The affected element is an unknown function of the file /admin/ajax.php?action=savecategory. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The...

6.5CVSS0.002EPSS
SaveExploits0References6
Circl
Circl
added 2026/08/20 3:00 p.m.11 views

CVE-2026-76833

creationtimestamp| type| source ---|---|--- 2026-08-20 15:00:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtjj5g6een2r...

8.4CVSS4.9AI score0.00151EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/20 3:00 p.m.18 views

CVE-2026-76996

SourceCodester Simple Online Food Ordering System 1.0 has a SQL injection flaw in /fos/admin/view_order.php, exploitable via the ID argument with no authentication required. VulDB rates it CVSS 7.5 (HIGH) with proof-of-concept exploit code available. No patch version or remediation details are pr...

7.5CVSS7.2AI score0.00263EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/08/20 3:00 p.m.9 views

EUVD-2026-63393

A security flaw has been discovered in SourceCodester Simple Online Food Ordering System 1.0. Impacted is an unknown function of the file /fos/admin/vieworder.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit has been released ...

7.5CVSS7.2AI score0.00263EPSS
SaveExploits0References6
CVE
CVE
added 2026/08/20 2:45 p.m.9 views

CVE-2026-76995

The description states the exploit is publicly available but no exploit code or proof-of-concept is included in the provided documents, so actual exploitation status cannot be confirmed here.

5.8CVSS5AI score0.00227EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/08/20 2:45 p.m.14 views

EUVD-2026-63391

A vulnerability was identified in SourceCodester Simple Online Food Ordering System 1.0. This issue affects some unknown processing of the file /admin/ajax.php?action=savemenu. The manipulation of the argument img leads to unrestricted upload. The attack is possible to be carried out remotely. Th...

5.8CVSS5AI score0.00227EPSS
SaveExploits0References6
Debian CVE
Debian CVE
added 2026/08/20 2:32 p.m.9 views

CVE-2026-61897

An Ubuntu-specific patch to AccountsService before 23.13.9-8ubuntu7 only partially drops privileges before launching language helper scripts. It changes the effective UID/GID to the target user but leaves the real UID as 0 root. A shell spawned by a helper script inherits ruid=0 and may reset its...

7.8CVSS5.4AI score0.00097EPSS
SaveExploits0
OSV
OSV
added 2026/08/20 2:30 p.m.18 views

CVE-2026-76993 GreyDGL PentestGPT Web-Page Crawling injection

A vulnerability was determined in GreyDGL PentestGPT up to 1.0.0. This vulnerability affects unknown code of the component Web-Page Crawling. Executing a manipulation of the argument Traceback can lead to injection. The attack can be executed remotely. A high complexity level is associated with...

2.3CVSS4.9AI score
SaveExploits0References9
Cvelist
Cvelist
added 2026/08/20 2:15 p.m.30 views

CVE-2026-76991 itsourcecode Hospital Management System viewappointmentapproved.php sql injection

A vulnerability was found in itsourcecode Hospital Management System 1.0. This affects an unknown part of the file /viewappointmentapproved.php. Performing a manipulation of the argument delid results in sql injection. Remote exploitation of the attack is possible. The exploit has been made publi...

6.5CVSS0.002EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/08/20 2:15 p.m.10 views

EUVD-2026-63375

A vulnerability was found in itsourcecode Hospital Management System 1.0. This affects an unknown part of the file /viewappointmentapproved.php. Performing a manipulation of the argument delid results in sql injection. Remote exploitation of the attack is possible. The exploit has been made publi...

6.5CVSS6.3AI score0.002EPSS
SaveExploits0References6
CVE
CVE
added 2026/08/20 1:57 p.m.21 views

CVE-2026-64962

ATutor's profile update functionality lacks CSRF token validation, allowing an attacker to craft a malicious site that submits forged profile-modification requests when visited by an authenticated victim. CVSS 5.1 (Medium), network attack vector. ATutor is end-of-life; no fix exists—upgrade to a ...

5.1CVSS5.5AI score0.00175EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/08/20 1:44 p.m.5 views

CVE-2026-74267

A flaw was found in the Linux kernel's schcodel Controlled Delay component, which manages network packet queues. When schcodel processes packets, it can incorrectly reduce the queue's size before it is properly updated. This error can lead to the premature deactivation of a parent queue, such as...

9.8CVSS5.5AI score0.00704EPSS
SaveExploits0References4
Rows per page
Query Builder