Lucene search
+L

923 matches found

NVD
NVD
•added 2026/10/21 9:17 p.m.•12 views

CVE-2026-114378

A vulnerability was detected in itsourcecode Online Cake Ordering System 1.0. This affects an unknown part of the file /deleteproduct.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit is now public and may be used...

6.5CVSS0.00262EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/10/21 8:30 p.m.•8 views

EUVD-2026-107554

A vulnerability was detected in itsourcecode Online Cake Ordering System 1.0. This affects an unknown part of the file /deleteproduct.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit is now public and may be used...

6.5CVSS6.6AI score0.00262EPSS
SaveExploits0References6
NVD
NVD
•added 2026/10/21 3:17 p.m.•7 views

CVE-2026-114251

A vulnerability has been found in itsourcecode Sales-and-Inventory-System up to 0a3c45a78aaff3601b8cf9ce8ba82ff5c345caac. Impacted is an unknown function of the file /pages/custdel.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit h...

6.5CVSS0.00251EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/10/21 12:00 a.m.•4 views

PT-2026-120635

A vulnerability was found in itsourcecode Sales-and-Inventory-System up to 0a3c45a78aaff3601b8cf9ce8ba82ff5c345caac. The affected element is an unknown function of the file /pages/cust searchfrm.php. Performing a manipulation of the argument ID results in sql injection. The attack may be initiate...

6.5CVSS6.2AI score0.002EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/10/21 12:00 a.m.•4 views

PT-2026-120815

Name of the Vulnerable Software and Affected Versions itsourcecode Online Cake Ordering System version 1.0 Description A remote SQL injection is possible due to improper handling of the ID argument within the '/deleteproduct.php' endpoint. SQL injection is a technique where an attacker inserts...

6.5CVSS6.7AI score0.00262EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•8 views

CVE-2026-108968: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in SourceCodester Performance Indicator System 1.0. The affected element is an unknown function of the file /opils/staff/saleshistory.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been...

7.5CVSS7AI score0.00263EPSS
SaveExploits0References3
NVD
NVD
•added 2026/10/12 8:17 p.m.•14 views

CVE-2026-108926

A security flaw has been discovered in itsourcecode Baptism Information Management System 1.0. This affects an unknown part of the file ebaptism.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit has been released to the public...

6.5CVSS0.00242EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/12 8:15 p.m.•42 views

CVE-2026-108928 itsourcecode Online Admission System sum.php sql injection

A security vulnerability has been detected in itsourcecode Online Admission System 1.0. This issue affects some unknown processing of the file /admin/sum.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed...

6.5CVSS0.0025EPSS
SaveExploits0References6
CVE
CVE
•added 2026/10/12 8:15 p.m.•19 views

CVE-2026-108928

The itsourcecode Online Admission System 1.0 is vulnerable to SQL injection due to improper processing of the ID argument within the /admin/sum.php file. This flaw allows for remote execution of the attack. The exploit has been disclosed publicly and may be used. No specific remediation or exploi...

6.5CVSS6.4AI score0.0025EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/12 12:00 a.m.•8 views

CVE-2026-108928: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in itsourcecode Online Admission System 1.0. This issue affects some unknown processing of the file /admin/sum.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed...

6.5CVSS6.4AI score0.0025EPSS
SaveExploits0References3
NVD
NVD
•added 2026/10/05 4:17 a.m.•20 views

CVE-2026-105187

A vulnerability has been found in itsourcecode Online Admission System 1.0. Affected is an unknown function of the file /admin/key.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used...

6.5CVSS0.002EPSS
SaveExploits0References6
NVD
NVD
•added 2026/10/05 3:16 a.m.•16 views

CVE-2026-105184

A security vulnerability has been detected in itsourcecode Online Admission System 1.0. The impacted element is an unknown function of the file /admin/creteria.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

7.5CVSS0.00263EPSS
SaveExploits0References6
CVE
CVE
•added 2026/10/05 3:00 a.m.•17 views

CVE-2026-105184

A security vulnerability exists in itsourcecode Online Admission System 1.0 within an unknown function of the /admin/creteria.php file. Improper handling of the ID argument allows for a SQL injection attack, which can be launched remotely. Public exploits for this vulnerability have been disclose...

7.5CVSS7AI score0.00263EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/05 12:00 a.m.•12 views

CVE-2026-105187: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in itsourcecode Online Admission System 1.0. Affected is an unknown function of the file /admin/key.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used...

6.5CVSS6.5AI score0.002EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/05 12:00 a.m.•15 views

PT-2026-104670

A vulnerability was determined in SourceCodester Drug Recommendation System 1.0. Impacted is an unknown function of the file /Admin/edit class.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed...

5.8CVSS5.5AI score0.00202EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/10/05 12:00 a.m.•10 views

PT-2026-104716

A vulnerability has been found in itsourcecode Online Admission System 1.0. Affected is an unknown function of the file /admin/key.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used...

6.5CVSS6.5AI score0.002EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2026/10/04 2:00 a.m.•19 views

CVE-2026-105097 Omega Solution CoinEx Crypto Customer Information API customer-currency authorization

A vulnerability was identified in Omega Solution CoinEx Crypto 2025. This impacts an unknown function of the file /customer-currency/ of the component Customer Information API. The manipulation of the argument ID leads to authorization bypass. Remote exploitation of the attack is possible. The...

5.3CVSS5.1AI score0.00294EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/10/04 2:00 a.m.•57 views

EUVD-2026-92063

A vulnerability was identified in Omega Solution CoinEx Crypto 2025. This impacts an unknown function of the file /customer-currency/ of the component Customer Information API. The manipulation of the argument ID leads to authorization bypass. Remote exploitation of the attack is possible. The...

5.3CVSS5.1AI score0.00294EPSS
SaveExploits0References5
CVE
CVE
•added 2026/10/04 2:00 a.m.•45 views

CVE-2026-105097

A vulnerability exists in the Customer Information API of Omega Solution CoinEx Crypto 2025 . The issue resides in an unknown function within the /customer-currency/ file, where manipulating the ID argument results in an authorization bypass . Remote exploitation is possible, and a public exploit...

5.3CVSS5.1AI score0.00294EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/10/04 12:45 a.m.•26 views

EUVD-2026-92059

A vulnerability was determined in Omega Solution CoinEx Crypto 2025. This affects an unknown function of the file /customer/ of the component Customer Profile API. Executing a manipulation of the argument ID can lead to authorization bypass. The attack may be launched remotely. The exploit has be...

6.5CVSS6AI score0.00285EPSS
SaveExploits0References5
Rows per page
Query Builder