Lucene search
K

9 matches found

CNNVD
CNNVD
added 2026/04/27 12:0 a.m.6 views

Code-Projects Invoice System in Laravel 跨站脚本漏洞

Code-Projects Invoice System in Laravel is an open-source invoice system developed by Code-Projects. Version 1.0 of the Code-Projects Invoice System in Laravel contained a cross-site scripting vulnerability. This vulnerability was caused by unknown functions in the /item file that manipulated the...

5.1CVSS5.6AI score0.00036EPSS
Exploits0References2
NVD
NVD
added 2026/03/17 6:16 p.m.2 views

CVE-2026-4319

A vulnerability was identified in code-projects Simple Food Order System 1.0. Affected by this vulnerability is an unknown functionality of the file /routers/add-item.php. Such manipulation of the argument price leads to sql injection. The attack can be launched remotely. The exploit is publicly...

9.8CVSS0.00045EPSS
Exploits1References5
CVE
CVE
added 2026/03/17 5:2 p.m.5 views

CVE-2026-4319

CVE-2026-4319 affects code-projects Simple Food Order System 1.0. The vulnerability targets an unknown functionality in /routers/add-item.php where manipulating the price argument enables SQL injection. Exploitation can be performed remotely, and public exploits exist. The available data does not...

9.8CVSS7AI score0.00045EPSS
Exploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2026/02/22 1:18 p.m.3 views

CVE-2019-25443 Inventory Webapp SQL Injection via add-item.php

Inventory Webapp contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through GET parameters. Attackers can supply malicious SQL payloads in the name, description, quantity, or catid parameters to add-item.php to execut...

8.8CVSS6.2AI score0.00132EPSS
Exploits0References2
OSV
OSV
added 2025/05/10 5:15 p.m.3 views

CVE-2025-4507

A vulnerability classified as critical has been found in Campcodes Online Food Ordering System 1.0. This affects an unknown part of the file /routers/add-item.php. The manipulation of the argument price leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

9.8CVSS5.8AI score
Exploits0References5
OSV
OSV
added 2024/08/22 11:15 p.m.2 views

CVE-2024-8087

A vulnerability was found in SourceCodester E-Commerce System 1.0 and classified as critical. This issue affects some unknown processing of the file /ecommerce/popupItem.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been...

9.8CVSS5.8AI score0.00072EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2024/06/20 12:0 a.m.3 views

PT-2024-37456 · Unknown · Sourcecodester Food Ordering Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Food Ordering Management System version 1.0 Description: A critical issue has been found in the SourceCodester Food Ordering Management System. The problem affects the file add-item.php, where the manipulation of the price...

8.8CVSS8.1AI score0.00097EPSS
Exploits1References10
CNNVD
CNNVD
added 2022/08/25 12:0 a.m.0 views

Ingredients Stock Management System SQL注入漏洞

Ingredients Stock Management System is an ingredient stock management system by Carlo Montero. v1.0 of the Ingredients Stock Management System is vulnerable to SQL injection, which originates from the /items/manage The SQL injection issue exists in the id parameter of the item.php location. No...

8.8CVSS7.9AI score0.00325EPSS
Exploits1References2
CNVD
CNVD
added 2018/09/29 12:0 a.m.2 views

Fuji Electric Alpha5 Smart Loader Buffer Overflow Vulnerability (CNVD-2019-03308)

The Fuji Electric Alpha5 Smart Loader is a servo motor product from Fuji Electric Japan. A heap buffer overflow vulnerability exists in Fuji Electric Alpha5 Smart Loader 3.7 and earlier versions, which can be exploited by an attacker to execute code due to the program failing to detect the...

9.8CVSS9.8AI score0.00631EPSS
Exploits0References1
Rows per page
Query Builder