Lucene search
K

43 matches found

OSV
OSV
added 2026/05/19 7:25 p.m.2 views

CLSA-2026-1779218750 gcc: Fix of 2 CVEs

CVE-2021-3826: fix buffer overflow in dlanglname function to prevent denial of service - CVE-2021-46195: fix infinite recursion in rust demangler to prevent denial of service...

6.5CVSS6.2AI score0.00556EPSS
Exploits1References1
NVD
NVD
added 2026/04/27 6:16 a.m.2 views

CVE-2026-7089

A security vulnerability has been detected in code-projects Home Service System 1.0. The impacted element is an unknown function of the file /booking.php of the component Appointment Booking. The manipulation of the argument fname/lname leads to cross site scripting. The attack may be initiated...

5.3CVSS0.00014EPSS
Exploits0References5
EUVD
EUVD
added 2026/04/27 5:0 a.m.2 views

EUVD-2026-25773

A security vulnerability has been detected in code-projects Home Service System 1.0. The impacted element is an unknown function of the file /booking.php of the component Appointment Booking. The manipulation of the argument fname/lname leads to cross site scripting. The attack may be initiated...

5.3CVSS3.8AI score0.00014EPSS
Exploits0References5
CNNVD
CNNVD
added 2026/04/27 12:0 a.m.5 views

Code-Projects Home Service System 跨站脚本漏洞

The Code-Projects Home Service System is an open-source door-to-door service system developed by Code-Projects. Version 1.0 of the Code-Projects Home Service System contains a cross-site scripting vulnerability. This vulnerability stems from improper handling of parameters fname and lname in the...

5.3CVSS5.6AI score0.00014EPSS
Exploits0References1
NVD
NVD
added 2025/12/30 1:15 a.m.2 views

CVE-2025-15211

A flaw has been found in code-projects Refugee Food Management System 1.0. Impacted is an unknown function of the file /home/refugee.php. Executing manipulation of the argument refNo/Fname/Lname/sex/age/contact/nationalitynid can lead to sql injection. The attack can be executed remotely. The...

9.8CVSS0.00019EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/11/14 12:0 a.m.2 views

CVE-2024-44630

Multiple parameters in register.php in PHPGurukul Student Record System 3.20 are vulnerable to SQL injection. These include: c-full, fname, mname,lname, gname, ocp, nation, mobno, email, board1, roll1, pyear1, board2, roll2, pyear2, sub1,marks1, sub2, course-short, income, category, ph, country,...

7.2AI score0.00037EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-46029

Malicious code in bioql PyPI...

6.1CVSS6.6AI score0.00167EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-28861

Malicious code in bioql PyPI...

9.8CVSS7.5AI score0.0009EPSS
Exploits1References5
OSV
OSV
added 2025/09/30 3:15 p.m.1 views

CVE-2025-28016

A Reflected Cross-Site Scripting XSS vulnerability was found in loginsystem/edit-profile.php of the PHPGurukul User Registration & Login and User Management System V3.3. This vulnerability allows remote attackers to execute arbitrary JavaScript code via the fname, lname, and contact parameters...

4.8CVSS6AI score
Exploits0References1
Cvelist
Cvelist
added 2025/09/30 12:0 a.m.4 views

CVE-2025-28016

A Reflected Cross-Site Scripting XSS vulnerability was found in loginsystem/edit-profile.php of the PHPGurukul User Registration & Login and User Management System V3.3. This vulnerability allows remote attackers to execute arbitrary JavaScript code via the fname, lname, and contact parameters...

0.00045EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/08/30 6:19 p.m.2 views

CVE-2025-9492

A vulnerability was determined in Campcodes Online Water Billing System 1.0. This affects an unknown function of the file /addclient1.php. Executing manipulation of the argument lname can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed and may b...

9.8CVSS7.4AI score0.0009EPSS
Exploits1References1
OSV
OSV
added 2025/08/26 10:15 p.m.1 views

CVE-2025-9492

A vulnerability was determined in Campcodes Online Water Billing System 1.0. This affects an unknown function of the file /addclient1.php. Executing manipulation of the argument lname can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed and may b...

9.8CVSS5.8AI score
Exploits0References5
NVD
NVD
added 2025/08/26 10:15 p.m.1 views

CVE-2025-9492

A vulnerability was determined in Campcodes Online Water Billing System 1.0. This affects an unknown function of the file /addclient1.php. Executing manipulation of the argument lname can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed and may b...

9.8CVSS0.0009EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/08/26 10:2 p.m.7 views

CVE-2025-9492 Campcodes Online Water Billing System addclient1.php sql injection

A vulnerability was determined in Campcodes Online Water Billing System 1.0. This affects an unknown function of the file /addclient1.php. Executing manipulation of the argument lname can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed and may b...

7.5CVSS0.0009EPSS
Exploits1References5
CVE
CVE
added 2025/08/26 10:2 p.m.10 views

CVE-2025-9492

CVE-2025-9492 affects Campcodes Online Water Billing System 1.0, with a vulnerability in the file /addclient1.php. Manipulating the lname parameter can lead to SQL injection, and the issue is remotely exploitable with other parameters possibly affected. Public exploitation details exist (includin...

9.8CVSS7.4AI score0.0009EPSS
Exploits1References5Affected Software1
Positive Technologies
Positive Technologies
added 2025/08/26 12:0 a.m.3 views

PT-2025-34817 · Unknown · Campcodes Online Water Billing System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Water Billing System version 1.0 Description: A vulnerability exists in Campcodes Online Water Billing System that allows for SQL injection. The issue affects an unknown function within the /addclient1.php file. Manipulation ...

7.5CVSS8.5AI score0.0009EPSS
Exploits1References9
OSV
OSV
added 2025/08/07 6:15 p.m.1 views

CVE-2023-41529

Hospital Management System v4 was discovered to contain multiple cross-site scripting XSS vulnerabilities in func2.php via the fname and lname parameters...

6.1CVSS5.7AI score0.00167EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/22 7:44 p.m.6 views

CVE-2021-32103

A Stored XSS vulnerability in interface/usergroup/usergroupadmin.php in OpenEMR before 5.0.2.1 allows a admin authenticated user to inject arbitrary web script or HTML via the lname parameter...

4.8CVSS5.4AI score0.00505EPSS
Exploits0References1
OSV
OSV
added 2025/03/13 4:15 p.m.0 views

CVE-2025-28015

A HTML Injection vulnerability was found in loginsystem/edit-profile.php of the PHPGurukul User Registration & Login and User Management System V3.3. This vulnerability allows remote attackers to execute arbitrary HTML code via the fname, lname, and contact parameters...

5.3CVSS6.1AI score
Exploits0References1
OSV
OSV
added 2024/12/29 12:15 p.m.1 views

CVE-2024-13012

A vulnerability, which was classified as problematic, has been found in code-projects Hostel Management System 1.0. This issue affects some unknown processing of the file /admin/registration.php. The manipulation of the argument fname/mname/lname leads to cross site scripting. The attack may be...

6.1CVSS4AI score0.00069EPSS
Exploits0References4
Rows per page
Query Builder