Lucene search
+L

174 matches found

Vulnrichment
Vulnrichment
•added 2026/09/15 3:15 a.m.•7 views

CVE-2026-90857 SourceCodester College Notes Gallery Management System Profile Upload userprofile.php unrestricted upload

A vulnerability was detected in SourceCodester College Notes Gallery Management System 1.0. Affected is an unknown function of the file /dashboard/userprofile.php of the component Profile Upload. Performing a manipulation of the argument image results in unrestricted upload. The attack may be...

6.5CVSS6.4AI score0.00366EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/09/15 3:00 a.m.•9 views

CVE-2026-90856 SourceCodester College Notes Gallery Management System Registration Flow signup.php privileges management

A security vulnerability has been detected in SourceCodester College Notes Gallery Management System 1.0. This impacts an unknown function of the file signup.php of the component Registration Flow. Such manipulation of the argument role leads to improper privilege management. The attack can be...

7.5CVSS6.9AI score0.00495EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/09/15 1:30 a.m.•6 views

CVE-2026-90849 SourceCodester College Notes Gallery Management System login.php sql injection

A security vulnerability has been detected in SourceCodester College Notes Gallery Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /College/login.php. The manipulation of the argument User leads to sql injection. The attack may be initiated remotely...

7.5CVSS7AI score0.00435EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•0 views

CVE-2026-90849: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in SourceCodester College Notes Gallery Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /College/login.php. The manipulation of the argument User leads to sql injection. The attack may be initiated remotely...

7.5CVSS5.6AI score0.00435EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•0 views

CVE-2026-90857: Unrestricted Upload of File with Dangerous Type

A vulnerability was detected in SourceCodester College Notes Gallery Management System 1.0. Affected is an unknown function of the file /dashboard/userprofile.php of the component Profile Upload. Performing a manipulation of the argument image results in unrestricted upload. The attack may be...

6.5CVSS5.4AI score0.00366EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•1 views

CVE-2026-90856: Improper Privilege Management

A security vulnerability has been detected in SourceCodester College Notes Gallery Management System 1.0. This impacts an unknown function of the file signup.php of the component Registration Flow. Such manipulation of the argument role leads to improper privilege management. The attack can be...

7.5CVSS5.4AI score0.00495EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2025-18821

Malicious code in bioql PyPI...

8.8CVSS6.6AI score0.00451EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2025-13475

Malicious code in bioql PyPI...

9.8CVSS7.5AI score0.00584EPSS
SaveExploits1References7
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•13 views

EUVD-2025-7310

Malicious code in bioql PyPI...

6.1CVSS4.8AI score0.00339EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•19 views

EUVD-2025-7303

Malicious code in bioql PyPI...

9.8CVSS6.6AI score0.00468EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2025-7307

Malicious code in bioql PyPI...

9.8CVSS7.5AI score0.00527EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2025-12567

Malicious code in bioql PyPI...

9.8CVSS7.5AI score0.00519EPSS
SaveExploits1References7
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•19 views

EUVD-2025-13386

Malicious code in bioql PyPI...

9.8CVSS7.5AI score0.00584EPSS
SaveExploits1References7
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2025-7302

Malicious code in bioql PyPI...

9.8CVSS6.6AI score0.00468EPSS
SaveExploits1References7
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•13 views

EUVD-2025-7481

Malicious code in bioql PyPI...

5.1CVSS4.8AI score0.00378EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•12 views

EUVD-2025-12566

Malicious code in bioql PyPI...

9.8CVSS7.5AI score0.00519EPSS
SaveExploits1References7
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•13 views

EUVD-2025-18820

Malicious code in bioql PyPI...

8.8CVSS6.5AI score0.00452EPSS
SaveExploits1References5
CVE
CVE
•added 2025/07/18 12:02 a.m.•55 views

CVE-2025-7767

CVE-2025-7767 affects PHPGurukul Art Gallery Management System 1.1. The vulnerability lies in the /admin/edit-art-medium-detail.php file where the artmed parameter can be manipulated to trigger cross-site scripting (XSS). The issue is exploitable remotely, and multiple connected sources indicate ...

5.4CVSS3.7AI score0.00262EPSS
SaveExploits1References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/18 12:00 a.m.•0 views

CVE-2025-7767: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in PHPGurukul Art Gallery Management System 1.1. Affected by this issue is some unknown functionality of the file /admin/edit-art-medium-detail.php. The manipulation of the argument artmed leads to cross site scripting. The atta...

5.4CVSS3.9AI score0.00262EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/06/23 7:36 p.m.•15 views

CVE-2025-6416

A vulnerability, which was classified as critical, was found in PHPGurukul Art Gallery Management System 1.1. Affected is an unknown function of the file /admin/changeimage4.php. The manipulation of the argument editid leads to sql injection. It is possible to launch the attack remotely. The...

8.8CVSS7.7AI score0.00451EPSS
SaveExploits1References1
Rows per page
Query Builder