Lucene search
+L

260 matches found

Cvelist
Cvelist
•added 2026/10/26 10:00 p.m.•23 views

CVE-2026-116515 itsourcecode Online Book Store book.php sql injection

A security vulnerability has been detected in itsourcecode Online Book Store 1.0. This vulnerability affects unknown code of the file /book.php. The manipulation of the argument bookisbn leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed...

6.5CVSS0.0025EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/10/26 10:00 p.m.•5 views

CVE-2026-116515 itsourcecode Online Book Store book.php sql injection

A security vulnerability has been detected in itsourcecode Online Book Store 1.0. This vulnerability affects unknown code of the file /book.php. The manipulation of the argument bookisbn leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed...

6.5CVSS6.5AI score0.0025EPSS
SaveExploits0References6
CVE
CVE
•added 2026/10/26 10:00 p.m.•13 views

CVE-2026-116515

The itsourcecode Online Book Store 1.0 application is vulnerable to SQL injection within the /book.php file. The vulnerability is triggered by the manipulation of the bookisbn argument. This flaw can be exploited remotely, and an exploit has been disclosed publicly. No specific remediation or ver...

6.5CVSS6.5AI score0.0025EPSS
SaveExploits0References6
CVE
CVE
•added 2026/10/26 12:15 a.m.•18 views

CVE-2026-116101

The itsourcecode Online Cake Ordering System 1.0 is vulnerable to an SQL injection flaw within an unknown function in the /deletetransac.php file. An attacker can exploit this by manipulating the ID argument, which may be performed remotely. The documentation indicates that an exploit has been ma...

6.5CVSS6.4AI score0.002EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/26 12:15 a.m.•29 views

CVE-2026-116101 itsourcecode Online Cake Ordering System deletetransac.php sql injection

A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. The affected element is an unknown function of the file /deletetransac.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit has been made public and could ...

6.5CVSS0.002EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2026/10/26 12:00 a.m.•5 views

itsourcecode Online Book Store input validation error vulnerability

The 1.0 version of itsourcecode Online Book Store contains a security vulnerability stemming from improper handling of the bookisbn parameter in the /book.php file, which may lead to SQL injection...

6.5CVSS6.6AI score0.0025EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/10/26 12:00 a.m.•6 views

PT-2026-125498

A security vulnerability has been detected in itsourcecode Online Book Store 1.0. This vulnerability affects unknown code of the file /book.php. The manipulation of the argument bookisbn leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed...

6.5CVSS6.5AI score0.0025EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/21 10:00 p.m.•23 views

CVE-2026-114384 itsourcecode Online Cake Ordering System transactionsave.php sql injection

A security vulnerability has been detected in itsourcecode Online Cake Ordering System 1.0. Affected is an unknown function of the file /transactionsave.php. Such manipulation of the argument del leads to sql injection. The attack can be launched remotely. The exploit has been disclosed publicly...

6.5CVSS0.00319EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/10/21 10:00 p.m.•9 views

CVE-2026-114384 itsourcecode Online Cake Ordering System transactionsave.php sql injection

A security vulnerability has been detected in itsourcecode Online Cake Ordering System 1.0. Affected is an unknown function of the file /transactionsave.php. Such manipulation of the argument del leads to sql injection. The attack can be launched remotely. The exploit has been disclosed publicly...

6.5CVSS6.5AI score0.00319EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/21 9:15 p.m.•24 views

CVE-2026-114381 itsourcecode Online Cake Ordering System orderdetail.php sql injection

A vulnerability was determined in itsourcecode Online Cake Ordering System 1.0. The affected element is an unknown function of the file /orderdetail.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been publicly...

6.5CVSS0.00319EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/10/21 9:15 p.m.•8 views

CVE-2026-114381 itsourcecode Online Cake Ordering System orderdetail.php sql injection

A vulnerability was determined in itsourcecode Online Cake Ordering System 1.0. The affected element is an unknown function of the file /orderdetail.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been publicly...

6.5CVSS6.4AI score0.00319EPSS
SaveExploits0References6
CVE
CVE
•added 2026/10/21 9:15 p.m.•17 views

CVE-2026-114381

The itsourcecode Online Cake Ordering System 1.0 is vulnerable to a SQL injection vulnerability within an unknown function of the /orderdetail.php file. An attacker can perform a remote attack by manipulating the ID argument. The exploit has been publicly disclosed and may be utilized. No specifi...

6.5CVSS6.4AI score0.00319EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/21 9:00 p.m.•37 views

CVE-2026-114380 itsourcecode Online Cake Ordering System inserttrans.php sql injection

A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. Impacted is an unknown function of the file /inserttrans.php. Performing a manipulation of the argument prcd results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public and...

6.5CVSS0.00209EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/21 8:30 p.m.•28 views

CVE-2026-114378 itsourcecode Online Cake Ordering System deleteproduct.php sql injection

A vulnerability was detected in itsourcecode Online Cake Ordering System 1.0. This affects an unknown part of the file /deleteproduct.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit is now public and may be used...

6.5CVSS0.00262EPSS
SaveExploits0References6
CVE
CVE
•added 2026/10/21 8:30 p.m.•20 views

CVE-2026-114378

The itsourcecode Online Cake Ordering System 1.0 is vulnerable to an SQL injection in the /deleteproduct.php file. An attacker can manipulate the ID argument to execute unauthorized SQL commands. This vulnerability can be triggered remotely, and public exploits are currently available for use. No...

6.5CVSS6.5AI score0.00262EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/10/21 8:30 p.m.•11 views

CVE-2026-114378 itsourcecode Online Cake Ordering System deleteproduct.php sql injection

A vulnerability was detected in itsourcecode Online Cake Ordering System 1.0. This affects an unknown part of the file /deleteproduct.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit is now public and may be used...

6.5CVSS6.5AI score0.00262EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/21 1:00 a.m.•29 views

CVE-2026-113741 itsourcecode Online Cake Ordering System 404.php cross site scripting

A vulnerability has been found in itsourcecode Online Cake Ordering System 1.0. Affected by this issue is some unknown functionality of the file /404.php. Such manipulation of the argument useruid leads to cross site scripting. The attack may be performed from remote. The exploit has been disclos...

5.3CVSS0.00342EPSS
SaveExploits0References6
CVE
CVE
•added 2026/10/21 1:00 a.m.•17 views

CVE-2026-113741

A cross-site scripting (XSS) vulnerability exists in the itsourcecode Online Cake Ordering System 1.0 . The flaw is located within an unknown functionality of the /404.php file, where manipulation of the useruid argument allows for the execution of malicious scripts. This attack can be performed ...

5.3CVSS3.4AI score0.00342EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/10/21 12:45 a.m.•10 views

CVE-2026-113740 itsourcecode Online Cake Ordering System deletecustomer.php sql injection

A flaw has been found in itsourcecode Online Cake Ordering System 1.0. Affected by this vulnerability is an unknown functionality of the file /deletecustomer.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been...

6.5CVSS6.5AI score0.00251EPSS
SaveExploits0References6
CVE
CVE
•added 2026/10/21 12:45 a.m.•21 views

CVE-2026-113740

The itsourcecode Online Cake Ordering System 1.0 is vulnerable to a remote SQL injection flaw. The vulnerability exists in an unknown functionality within the /deletecustomer.php file, where manipulation of the ID argument allows for unauthorized database interaction. An exploit for this vulnerab...

6.5CVSS6.5AI score0.00251EPSS
SaveExploits0References6
Rows per page
Query Builder