CVE-2026-78837

A SQL injection vulnerability in the apformid parameter in AppNitro MachForm v30 allows attackers to access sensitive database information via a crafted SQL statement...

CVE-2026-86518 code-projects Student Crud Operation edit.php sql injection

A vulnerability has been found in code-projects Student Crud Operation 1.0. This affects an unknown function of the file /edit.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used...

EUVD-2026-72641

A vulnerability has been found in code-projects Student Crud Operation 1.0. This affects an unknown function of the file /edit.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used...

CVE-2026-86518

A time-based blind SQL injection vulnerability exists in the code-projects Student Crud Operation 1.0 application, specifically in the /edit.php file via the id parameter. The vulnerability is remotely exploitable with low privileges required (authenticated user) and no user interaction needed. P...

CVE-2026-86517 itsourcecode Sales and Inventory System us_searchfrm.php mysqli_query sql injection

A flaw has been found in itsourcecode Sales and Inventory System 1.0. The impacted element is the function mysqliquery of the file /pages/ussearchfrm.php. Executing a manipulation of the argument ID can lead to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2026-86517

A SQL injection vulnerability exists in itsourcecode Sales and Inventory System version 1.0 , specifically in the mysqli_query function within /pages/us_searchfrm.php. Manipulating the ID parameter allows a remote, authenticated attacker to inject arbitrary SQL, resulting in low impact to confide...

CVE-2021-42670

CVE-2021-42670 CVE-2021-42670 - SQL-инъекция в системе онлайн-портала инженеров. Техническое описание: Уязвимость SQL-инъекции существует в Engineers Online Portal. Злоумышленник может использовать уязвимый параметр "id" на веб-странице "announcementsstudent.php" для манипуляции выполняемым...

CVE-2026-86310 itsourcecode Sales and Inventory System cust_edit1.php sql injection

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/custedit1.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the publ...

CVE-2026-86310

itsourcecode Sales and Inventory System 1.0 contains a SQL injection vulnerability in the file /pages/cust_edit1.php , triggered by manipulating the ID argument. The attack can be launched remotely with low privileges and no user interaction. A proof-of-concept exploit has been disclosed to the p...

CVE-2026-86309 itsourcecode Sales and Inventory System pro_searchfrm.php sql injection

A flaw has been found in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/prosearchfrm.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used...

CVE-2020-17530

¿Qué es esto? Este es un proyecto de prueba simple para S2-061 que puede usarse para analizar el detalle de esta vulnerabilidad. Cómo usar Paso 1: Usa IDEA para importar este proyecto Paso 2: Configura el servidor tomcat Paso 3: Accede mediante navegador a...

CVE-2026-86301

A vulnerability has been found in code-projects Hospital Information System 1.0. Affected is an unknown function of the file /HIS/src/patients/editPatient.php of the component Patient Management. Such manipulation of the argument ID leads to cross site scripting. The attack may be launched...

EUVD-2026-72353

A vulnerability has been found in code-projects Hospital Information System 1.0. Affected is an unknown function of the file /HIS/src/patients/editPatient.php of the component Patient Management. Such manipulation of the argument ID leads to cross site scripting. The attack may be launched...

CVE-2026-86301 code-projects Hospital Information System Patient Management editPatient.php cross site scripting

A vulnerability has been found in code-projects Hospital Information System 1.0. Affected is an unknown function of the file /HIS/src/patients/editPatient.php of the component Patient Management. Such manipulation of the argument ID leads to cross site scripting. The attack may be launched...

CVE-2026-86298

A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. Impacted is an unknown function of the file /deletesubject.php. Performing a manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2026-86298 SourceCodester Class and Exam Timetabling System delete_subject.php sql injection

A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. Impacted is an unknown function of the file /deletesubject.php. Performing a manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2026-86298

CVE-2026-86298 affects SourceCodester Class and Exam Timetabling System 1.0 , where an unauthenticated remote attacker can exploit a SQL injection vulnerability in the /delete_subject.php file by manipulating the ID parameter. The flaw is rated CVSS 3.1: 7.3 (HIGH) with low impact on confidential...

CVE-2026-86291

A security vulnerability has been detected in itsourcecode Sales and Inventory System 1.0. This impacts an unknown function of the file /pages/usedit1.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed publicly and...

EUVD-2026-72320

A security vulnerability has been detected in itsourcecode Sales and Inventory System 1.0. This impacts an unknown function of the file /pages/usedit1.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed publicly and...

CVE-2026-86291 itsourcecode Sales and Inventory System us_edit1.php sql injection

A security vulnerability has been detected in itsourcecode Sales and Inventory System 1.0. This impacts an unknown function of the file /pages/usedit1.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed publicly and...