Lucene search
K

2147 matches found

CNNVD
CNNVD
added 2026/03/16 12:0 a.m.2 views

itsourcecode Payroll Management System SQL注入漏洞

itsourcecode Payroll Management System is an open-source payroll management system developed by itsourcecode. Version 1.0 of the itsourcecode Payroll Management System has a SQL injection vulnerability. This vulnerability arises from operations on the parameter ID in the file manageemployee.php,...

9.8CVSS7.2AI score0.00013EPSS
Exploits1References5
CNNVD
CNNVD
added 2026/03/16 12:0 a.m.4 views

itsourcecode Online Enrollment System SQL注入漏洞

itsourcecode Online Enrollment System is an open-source online registration system developed by itsourcecode. Version 1.0 of the itsourcecode Online Enrollment System has a SQL injection vulnerability. This vulnerability stems from improper handling of the useremail parameter in the...

7.5CVSS7.2AI score0.00045EPSS
Exploits0References5
Cvelist
Cvelist
added 2026/03/12 8:2 a.m.23 views

CVE-2026-4014 itsourcecode Cafe Reservation System Registration signup.php sql injection

A security flaw has been discovered in itsourcecode Cafe Reservation System 1.0. This impacts an unknown function of the file /curvus2/signup.php of the component Registration. Performing a manipulation of the argument Username results in sql injection. Remote exploitation of the attack is...

7.5CVSS0.00039EPSS
Exploits1References5
EUVD
EUVD
added 2026/03/12 6:31 a.m.1 views

EUVD-2026-11536

A security vulnerability has been detected in itsourcecode Payroll Management System 1.0. This vulnerability affects unknown code of the file /manageemployeedeductions.php. Such manipulation of the argument ID leads to cross site scripting. The attack may be launched remotely. The exploit has bee...

5.3CVSS4.2AI score0.00045EPSS
Exploits0References6
EUVD
EUVD
added 2026/03/12 6:31 a.m.1 views

EUVD-2026-11529

A vulnerability was determined in itsourcecode University Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /viewresult.php. Executing a manipulation of the argument vr can lead to cross site scripting. The attack can be executed remotely. The exploit h...

5.3CVSS4.2AI score0.00045EPSS
Exploits0References6
Vulnrichment
Vulnrichment
added 2026/03/12 6:2 a.m.1 views

CVE-2026-3993 itsourcecode Payroll Management System manage_employee_deductions.php cross site scripting

A security vulnerability has been detected in itsourcecode Payroll Management System 1.0. This vulnerability affects unknown code of the file /manageemployeedeductions.php. Such manipulation of the argument ID leads to cross site scripting. The attack may be launched remotely. The exploit has bee...

5.3CVSS4.2AI score0.00045EPSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2026/03/12 6:2 a.m.0 views

CVE-2026-3993

A security vulnerability has been detected in itsourcecode Payroll Management System 1.0. This vulnerability affects unknown code of the file /manageemployeedeductions.php. Such manipulation of the argument ID leads to cross site scripting. The attack may be launched remotely. The exploit has bee...

5.3CVSS4.2AI score0.00045EPSS
Exploits0References5Affected Software1
NVD
NVD
added 2026/03/12 5:16 a.m.1 views

CVE-2026-3981

A vulnerability was found in itsourcecode Online Doctor Appointment System 1.0. Affected is an unknown function of the file /admin/doctoraction.php. Performing a manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit has been made publ...

9.8CVSS0.00039EPSS
Exploits1References5
NVD
NVD
added 2026/03/12 5:16 a.m.2 views

CVE-2026-3982

A vulnerability was determined in itsourcecode University Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /viewresult.php. Executing a manipulation of the argument vr can lead to cross site scripting. The attack can be executed remotely. The exploit h...

5.3CVSS0.00045EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2026/03/12 4:32 a.m.1 views

CVE-2026-3982 itsourcecode University Management System view_result.php cross site scripting

A vulnerability was determined in itsourcecode University Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /viewresult.php. Executing a manipulation of the argument vr can lead to cross site scripting. The attack can be executed remotely. The exploit h...

5.3CVSS4.2AI score0.00045EPSS
Exploits0References5
CVE
CVE
added 2026/03/12 4:32 a.m.7 views

CVE-2026-3982

CVE-2026-3982 affects itsourcecode University Management System 1.0. A vulnerability exists in an unknown functionality of the file /view_result.php, where manipulating the vr argument can trigger cross-site scripting. The attack is remotely executable (network access) and the exploit has been pu...

5.3CVSS4.2AI score0.00045EPSS
Exploits0References5
CVE
CVE
added 2026/03/12 4:32 a.m.6 views

CVE-2026-3981

The CVE-2026-3981 entry concerns itsourcecode Online Doctor Appointment System 1.0. The affected component is an unknown function in /admin/doctor_action.php where manipulating the argument ID triggers a SQL injection. Remote exploitation is possible, and public exploits have been released. Multi...

9.8CVSS6.9AI score0.00039EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2026/03/12 4:2 a.m.26 views

CVE-2026-3980 itsourcecode Online Doctor Appointment System patient_action.php sql injection

A vulnerability has been found in itsourcecode Online Doctor Appointment System 1.0. This impacts an unknown function of the file /admin/patientaction.php. Such manipulation of the argument patientid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to th...

7.5CVSS0.00039EPSS
Exploits1References5
CVE
CVE
added 2026/03/12 4:2 a.m.5 views

CVE-2026-3980

CVE-2026-3980 affects the itsourcecode Online Doctor Appointment System 1.0. The vulnerability is in the /admin/patient_action.php routine, where manipulating the argument patient_id enables an SQL injection. It can be exploited remotely, and public disclosure is noted; exploitation status varies...

9.8CVSS6.9AI score0.00039EPSS
Exploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2026/03/12 4:2 a.m.1 views

CVE-2026-3980 itsourcecode Online Doctor Appointment System patient_action.php sql injection

A vulnerability has been found in itsourcecode Online Doctor Appointment System 1.0. This impacts an unknown function of the file /admin/patientaction.php. Such manipulation of the argument patientid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to th...

7.5CVSS6.9AI score0.00039EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2026/03/12 12:0 a.m.2 views

PT-2026-24919

🚨 CVE-2026-3980 A vulnerability has been found in itsourcecode Online Doctor Appointment System 1.0. This impacts an unknown function of the file /admin/patient action.php. Such manipulation of the argument patient id leads to sql injection. The attack may be launched remotely. The exploit has be...

9.8CVSS6.9AI score0.00039EPSS
Exploits1References13
CNNVD
CNNVD
added 2026/03/12 12:0 a.m.3 views

itsourcecode University Management System 代码注入漏洞

itsourcecode University Management System is an open-source university management system developed by itsourcecode. Version 1.0 of itsourcecode University Management System has a code injection vulnerability. This vulnerability stems from incorrect handling of the parameter “vr” in the...

5.3CVSS5.7AI score0.00045EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2026/03/12 12:0 a.m.2 views

PT-2026-24920

🚨 CVE-2026-3981 A vulnerability was found in itsourcecode Online Doctor Appointment System 1.0. Affected is an unknown function of the file /admin/doctor action.php. Performing a manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit h...

9.8CVSS6.9AI score0.00039EPSS
Exploits1References12
CNNVD
CNNVD
added 2026/03/12 12:0 a.m.3 views

itsourcecode Online Doctor Appointment System SQL注入漏洞

itsourcecode Online Doctor Appointment System is an open-source online doctor appointment system developed by itsourcecode. Version 1.0 of the system has a SQL injection vulnerability, which stems from incorrect handling of the patientid parameter in the file admin/patientaction.php. This...

9.8CVSS7.2AI score0.00039EPSS
Exploits1References5
Cvelist
Cvelist
added 2026/03/11 12:32 p.m.26 views

CVE-2026-3944 itsourcecode University Management System att_add.php sql injection

A vulnerability was determined in itsourcecode University Management System 1.0. This vulnerability affects unknown code of the file /attadd.php. This manipulation of the argument Name causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be...

7.5CVSS0.00039EPSS
Exploits1References5
Rows per page
Query Builder