Lucene search
+L

11118 matches found

Cvelist
Cvelist
•added 2026/04/06 9:00 a.m.•51 views

CVE-2026-5640 PHPGurukul Online Shopping Portal Project Parameter update-image2.php sql injection

A vulnerability has been found in PHPGurukul Online Shopping Portal Project 2.1. The affected element is an unknown function of the file /admin/update-image2.php of the component Parameter Handler. The manipulation of the argument filename leads to sql injection. The attack is possible to be...

6.5CVSS0.00316EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/04/06 9:00 a.m.•10 views

CVE-2026-5640 PHPGurukul Online Shopping Portal Project Parameter update-image2.php sql injection

A vulnerability has been found in PHPGurukul Online Shopping Portal Project 2.1. The affected element is an unknown function of the file /admin/update-image2.php of the component Parameter Handler. The manipulation of the argument filename leads to sql injection. The attack is possible to be...

6.5CVSS6.4AI score0.00316EPSS
SaveExploits0References5
CVE
CVE
•added 2026/04/06 8:45 a.m.•29 views

CVE-2026-5639

PHPGurukul Online Shopping Portal Project 2.1 has a SQL injection flaw in the Parameter Handler’s /admin/update-image3.php. The vulnerability arises from manipulating the filename argument, enabling remote exploitation. Exploit published; CVSS notes range from 4.0 to 3.0 scales with PROOF-OF-CONC...

6.5CVSS6.4AI score0.00316EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/04/06 8:45 a.m.•8 views

CVE-2026-5639 PHPGurukul Online Shopping Portal Project Parameter update-image3.php sql injection

A flaw has been found in PHPGurukul Online Shopping Portal Project 2.1. Impacted is an unknown function of the file /admin/update-image3.php of the component Parameter Handler. Executing a manipulation of the argument filename can lead to sql injection. The attack can be executed remotely. The...

6.5CVSS6.4AI score0.00316EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/04/06 8:45 a.m.•59 views

CVE-2026-5639 PHPGurukul Online Shopping Portal Project Parameter update-image3.php sql injection

A flaw has been found in PHPGurukul Online Shopping Portal Project 2.1. Impacted is an unknown function of the file /admin/update-image3.php of the component Parameter Handler. Executing a manipulation of the argument filename can lead to sql injection. The attack can be executed remotely. The...

6.5CVSS0.00316EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2026/04/06 8:45 a.m.•7 views

CVE-2026-5639

A flaw has been found in PHPGurukul Online Shopping Portal Project 2.1. Impacted is an unknown function of the file /admin/update-image3.php of the component Parameter Handler. Executing a manipulation of the argument filename can lead to sql injection. The attack can be executed remotely. The...

6.5CVSS5.8AI score0.00316EPSS
SaveExploits0References5Affected Software1
NVD
NVD
•added 2026/04/06 8:16 a.m.•18 views

CVE-2026-5634

A vulnerability was identified in projectworlds Car Rental Project 1.0. Affected by this vulnerability is an unknown functionality of the file /bookcar.php of the component Parameter Handler. The manipulation of the argument fname leads to sql injection. The attack can be initiated remotely. The...

7.5CVSS0.00411EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/04/06 12:00 a.m.•30 views

PT-2026-30588

A vulnerability has been found in PHPGurukul Online Shopping Portal Project 2.1. The affected element is an unknown function of the file /admin/update-image2.php of the component Parameter Handler. The manipulation of the argument filename leads to sql injection. The attack is possible to be...

6.5CVSS5.7AI score0.00316EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/06 12:00 a.m.•3 views

CVE-2026-31062: Buffer Copy without Checking Size of Input

UTT Aggressive 520W v3v1.7.7-180627 was discovered to contain a buffer overflow in the filename parameter of the formFtpServerDirConfig function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

4.5CVSS5.9AI score0.00273EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/06 12:00 a.m.•3 views

CVE-2026-5641: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPGurukul Online Shopping Portal Project 2.1. The impacted element is an unknown function of the file /admin/update-image1.php of the component Parameter Handler. The manipulation of the argument filename results in sql injection. The attack may be performed from...

6.5CVSS6.4AI score0.00316EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/06 12:00 a.m.•5 views

CVE-2026-5640: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in PHPGurukul Online Shopping Portal Project 2.1. The affected element is an unknown function of the file /admin/update-image2.php of the component Parameter Handler. The manipulation of the argument filename leads to sql injection. The attack is possible to be...

6.5CVSS6.4AI score0.00316EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/06 12:00 a.m.•5 views

CVE-2026-5639: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in PHPGurukul Online Shopping Portal Project 2.1. Impacted is an unknown function of the file /admin/update-image3.php of the component Parameter Handler. Executing a manipulation of the argument filename can lead to sql injection. The attack can be executed remotely. The...

6.5CVSS6.4AI score0.00316EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/04/06 12:00 a.m.•20 views

PHPGurukul Online Shopping Portal Project SQL注入漏洞

The PHPGurukul Online Shopping Portal Project is an online shopping portal project of PHPGurukul Corporation. Version 2.1 of the PHPGurukul Online Shopping Portal Project has a SQL injection vulnerability. This vulnerability arises from incorrect handling of the parameter filename in the file...

6.5CVSS6.6AI score0.00316EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2026/04/06 12:00 a.m.•24 views

PHPGurukul Online Shopping Portal Project SQL注入漏洞

The PHPGurukul Online Shopping Portal Project is an online shopping portal project developed by PHPGurukul Corporation. Version 2.1 of the PHPGurukul Online Shopping Portal Project contains a SQL injection vulnerability. This vulnerability arises from incorrect handling of the parameter filename ...

6.5CVSS6.7AI score0.00316EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/04/06 12:00 a.m.•22 views

PT-2026-30587

A flaw has been found in PHPGurukul Online Shopping Portal Project 2.1. Impacted is an unknown function of the file /admin/update-image3.php of the component Parameter Handler. Executing a manipulation of the argument filename can lead to sql injection. The attack can be executed remotely. The...

6.5CVSS5.8AI score0.00316EPSS
SaveExploits0References6
CVE
CVE
•added 2026/04/06 12:00 a.m.•39 views

CVE-2026-31062

The UTT Aggressive 520W wireless router (version v3v1.7.7-180627 ) is vulnerable to a buffer overflow within the formFtpServerDirConfig function. The root cause is the copying of buffers without validating the size of the input data, specifically within the filename parameter . A remote attacker ...

4.5CVSS6AI score0.00273EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
•added 2026/04/06 12:00 a.m.•20 views

PT-2026-30620

UTT Aggressive 520W v3v1.7.7-180627 was discovered to contain a buffer overflow in the filename parameter of the formFtpServerDirConfig function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

6.2AI score0.00273EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2026/04/06 12:00 a.m.•17 views

PT-2026-30590

A vulnerability was found in PHPGurukul Online Shopping Portal Project 2.1. The impacted element is an unknown function of the file /admin/update-image1.php of the component Parameter Handler. The manipulation of the argument filename results in sql injection. The attack may be performed from...

6.5CVSS5.6AI score0.00316EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2026/04/06 12:00 a.m.•21 views

UTT 520W 安全漏洞

UTT 520W is a wireless router produced by China's UT Technology Co., Ltd. The UTT 520W v3v1.7.7-180627 version contains a security vulnerability. This vulnerability stems from a buffer overflow in the filename parameter of the formFtpServerDirConfig function, which could lead to a denial-of-servi...

4.5CVSS6.1AI score0.00273EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2026/04/06 12:00 a.m.•8 views

CVE-2026-31062

UTT Aggressive 520W v3v1.7.7-180627 was discovered to contain a buffer overflow in the filename parameter of the formFtpServerDirConfig function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

6AI score0.00273EPSS
SaveExploits1References1
Rows per page
Query Builder