Lucene search
+L

214 matches found

CVE
CVE
•added 2026/10/13 4:00 p.m.•6 views

CVE-2026-109606

The SourceCodester Art Gallery Management System 1.0 is vulnerable to a SQL injection flaw within the Account Creation component. Specifically, the Action::save_user function in the admin/admin_class.php file fails to properly neutralize the Name argument. This vulnerability allows for remote exp...

7.5CVSS7.1AI score0.00412EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/09/15 3:15 a.m.•16 views

CVE-2026-90857 SourceCodester College Notes Gallery Management System Profile Upload userprofile.php unrestricted upload

A vulnerability was detected in SourceCodester College Notes Gallery Management System 1.0. Affected is an unknown function of the file /dashboard/userprofile.php of the component Profile Upload. Performing a manipulation of the argument image results in unrestricted upload. The attack may be...

6.5CVSS6.4AI score0.00366EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/09/15 3:00 a.m.•17 views

CVE-2026-90856 SourceCodester College Notes Gallery Management System Registration Flow signup.php privileges management

A security vulnerability has been detected in SourceCodester College Notes Gallery Management System 1.0. This impacts an unknown function of the file signup.php of the component Registration Flow. Such manipulation of the argument role leads to improper privilege management. The attack can be...

7.5CVSS6.8AI score0.00495EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/09/15 1:30 a.m.•19 views

CVE-2026-90849 SourceCodester College Notes Gallery Management System login.php sql injection

A security vulnerability has been detected in SourceCodester College Notes Gallery Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /College/login.php. The manipulation of the argument User leads to sql injection. The attack may be initiated remotely...

7.5CVSS6.9AI score0.00435EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•5 views

CVE-2026-90857: Unrestricted Upload of File with Dangerous Type

A vulnerability was detected in SourceCodester College Notes Gallery Management System 1.0. Affected is an unknown function of the file /dashboard/userprofile.php of the component Profile Upload. Performing a manipulation of the argument image results in unrestricted upload. The attack may be...

6.5CVSS6.4AI score0.00366EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•12 views

CVE-2026-90849: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in SourceCodester College Notes Gallery Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /College/login.php. The manipulation of the argument User leads to sql injection. The attack may be initiated remotely...

7.5CVSS7AI score0.00435EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•9 views

CVE-2026-90856: Improper Privilege Management

A security vulnerability has been detected in SourceCodester College Notes Gallery Management System 1.0. This impacts an unknown function of the file signup.php of the component Registration Flow. Such manipulation of the argument role leads to improper privilege management. The attack can be...

7.5CVSS6.8AI score0.00495EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2025-18821

Malicious code in bioql PyPI...

8.8CVSS6.6AI score0.00451EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•27 views

EUVD-2025-13386

Malicious code in bioql PyPI...

9.8CVSS7.5AI score0.00639EPSS
SaveExploits1References7
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•20 views

EUVD-2025-7310

Malicious code in bioql PyPI...

6.1CVSS4.8AI score0.00339EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•19 views

EUVD-2025-7307

Malicious code in bioql PyPI...

9.8CVSS7.5AI score0.00527EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•20 views

EUVD-2025-12567

Malicious code in bioql PyPI...

9.8CVSS7.5AI score0.00519EPSS
SaveExploits1References7
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2025-12566

Malicious code in bioql PyPI...

9.8CVSS7.5AI score0.00519EPSS
SaveExploits1References7
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•23 views

EUVD-2025-13475

Malicious code in bioql PyPI...

9.8CVSS7.5AI score0.00639EPSS
SaveExploits1References7
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•23 views

EUVD-2025-7302

Malicious code in bioql PyPI...

9.8CVSS6.5AI score0.00477EPSS
SaveExploits1References7
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•26 views

EUVD-2025-7303

Malicious code in bioql PyPI...

9.8CVSS6.6AI score0.00477EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•19 views

EUVD-2025-18820

Malicious code in bioql PyPI...

8.8CVSS6.5AI score0.00452EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•19 views

EUVD-2025-7481

Malicious code in bioql PyPI...

5.1CVSS5.2AI score0.00385EPSS
SaveExploits1References5
CVE
CVE
•added 2025/07/18 12:02 a.m.•64 views

CVE-2025-7767

CVE-2025-7767 affects PHPGurukul Art Gallery Management System 1.1. The vulnerability lies in the /admin/edit-art-medium-detail.php file where the artmed parameter can be manipulated to trigger cross-site scripting (XSS). The issue is exploitable remotely, and multiple connected sources indicate ...

5.4CVSS3.6AI score0.00286EPSS
SaveExploits1References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/18 12:00 a.m.•9 views

CVE-2025-7767: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in PHPGurukul Art Gallery Management System 1.1. Affected by this issue is some unknown functionality of the file /admin/edit-art-medium-detail.php. The manipulation of the argument artmed leads to cross site scripting. The atta...

5.4CVSS3.9AI score0.00286EPSS
SaveExploits1References1
Rows per page
Query Builder