Lucene search
+L

116 matches found

NVD
NVD
•added 2026/10/12 6:16 a.m.•6 views

CVE-2026-108805

A flaw has been found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. Affected by this vulnerability is the function mysqlquery of the file source/loginprocessing.php of the component Login Handler. This manipulation of the argument email/password causes sq...

7.5CVSS0.00254EPSS
SaveExploits0References5
CVE
CVE
•added 2026/10/12 5:45 a.m.•17 views

CVE-2026-108805

The krupalshah EmployeeRecruitmentSystem is vulnerable to a remote SQL injection flaw in the Login Handler component. The vulnerability exists because the mysql_query function in the source/loginprocessing.php file fails to properly neutralize the email/password arguments. This flaw affects versi...

7.5CVSS6.9AI score0.00254EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/10/12 5:45 a.m.•7 views

EUVD-2026-97240

A flaw has been found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. Affected by this vulnerability is the function mysqlquery of the file source/loginprocessing.php of the component Login Handler. This manipulation of the argument email/password causes sq...

7.5CVSS6.9AI score0.00254EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/10/12 5:45 a.m.•31 views

CVE-2026-108805 krupalshah EmployeeRecruitmentSystem Login loginprocessing.php mysql_query sql injection

A flaw has been found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. Affected by this vulnerability is the function mysqlquery of the file source/loginprocessing.php of the component Login Handler. This manipulation of the argument email/password causes sq...

7.5CVSS0.00254EPSS
SaveExploits0References5
Kitploit
Kitploit
•added 2026/10/09 3:01 a.m.•17 views

CVE-2017-14980

🐞 CVE-2017-14980: Sync Breeze Enterprise 10.0.28 - Stack-Based Buffer Overflow Stack-based buffer overflow in Sync Breeze Enterprise 10.0.28 reachable through the /login handler, demonstrating how unchecked input length can corrupt stack memory. 📑 Table of Contents Why this repository exists Why...

9.8CVSS8.6AI score0.22312EPSS
SaveExploits7References1
EUVD
EUVD
•added 2026/10/06 12:32 a.m.•14 views

EUVD-2026-92816

A vulnerability was found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects the function mysqliquery of the file Admin/mlogin.php of the component Login Handler. Performing a manipulation of the argument uname/pass results in sql...

7.5CVSS6.7AI score0.00263EPSS
SaveExploits0References7
NVD
NVD
•added 2026/10/05 10:16 p.m.•14 views

CVE-2026-105468

A vulnerability was found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects the function mysqliquery of the file Admin/mlogin.php of the component Login Handler. Performing a manipulation of the argument uname/pass results in sql...

7.5CVSS0.00263EPSS
SaveExploits0References6
CVE
CVE
•added 2026/10/05 9:45 p.m.•20 views

CVE-2026-105468

The girishsaraf Online-Appointment-Booking-System is vulnerable to a SQL injection flaw within the Login Handler component, specifically affecting the mysqli_query function in the Admin/mlogin.php file. An attacker can initiate a remote attack by manipulating the uname or pass arguments. While th...

7.5CVSS6.7AI score0.00263EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/05 9:45 p.m.•41 views

CVE-2026-105468 girishsaraf Online-Appointment-Booking-System Login mlogin.php mysqli_query sql injection

A vulnerability was found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects the function mysqliquery of the file Admin/mlogin.php of the component Login Handler. Performing a manipulation of the argument uname/pass results in sql...

7.5CVSS0.00263EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/10/05 9:45 p.m.•9 views

CVE-2026-105468 girishsaraf Online-Appointment-Booking-System Login mlogin.php mysqli_query sql injection

A vulnerability was found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects the function mysqliquery of the file Admin/mlogin.php of the component Login Handler. Performing a manipulation of the argument uname/pass results in sql...

7.5CVSS6.7AI score0.00263EPSS
SaveExploits0References6
OSV
OSV
•added 2026/10/05 9:45 p.m.•5 views

CVE-2026-105468 girishsaraf Online-Appointment-Booking-System Login mlogin.php mysqli_query sql injection

A vulnerability was found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects the function mysqliquery of the file Admin/mlogin.php of the component Login Handler. Performing a manipulation of the argument uname/pass results in sql...

6.9CVSS5.4AI score
SaveExploits0References8
NVD
NVD
•added 2026/10/05 7:17 p.m.•10 views

CVE-2026-105387

A security flaw has been discovered in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects the function mysqliquery of the file cover.php of the component Patient Login Handler. The manipulation of the argument uname/psw results in sql...

7.5CVSS0.00328EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/05 6:45 p.m.•31 views

CVE-2026-105387 girishsaraf Online-Appointment-Booking-System Patient Login cover.php mysqli_query sql injection

A security flaw has been discovered in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects the function mysqliquery of the file cover.php of the component Patient Login Handler. The manipulation of the argument uname/psw results in sql...

7.5CVSS0.00328EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/10/05 6:45 p.m.•9 views

EUVD-2026-92631

A security flaw has been discovered in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects the function mysqliquery of the file cover.php of the component Patient Login Handler. The manipulation of the argument uname/psw results in sql...

7.5CVSS6.7AI score0.00328EPSS
SaveExploits0References6
CVE
CVE
•added 2026/10/05 6:45 p.m.•13 views

CVE-2026-105387

A security flaw exists in the girishsaraf Online-Appointment-Booking-System (up to commit f427b4757128ca253d33d0cc4e87bbb9c999a4d5) within the Patient Login Handler component. The vulnerability is located in the mysqli_query function of the cover.php file. By manipulating the uname/psw arguments,...

7.5CVSS6.7AI score0.00328EPSS
SaveExploits0References6
OSV
OSV
•added 2026/10/05 6:45 p.m.•5 views

CVE-2026-105387 girishsaraf Online-Appointment-Booking-System Patient Login cover.php mysqli_query sql injection

A security flaw has been discovered in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects the function mysqliquery of the file cover.php of the component Patient Login Handler. The manipulation of the argument uname/psw results in sql...

6.9CVSS5.4AI score
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2026/10/05 12:00 a.m.•11 views

PT-2026-106175

Name of the Vulnerable Software and Affected Versions girishsaraf Online-Appointment-Booking-System versions up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5 Description A remote SQL injection flaw exists within the Patient Login Handler component in the cover.php file. The issue occurs when the...

7.5CVSS7AI score0.00328EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2026/10/05 12:00 a.m.•11 views

PT-2026-106244

Name of the Vulnerable Software and Affected Versions girishsaraf Online-Appointment-Booking-System versions up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5 Description A remote SQL injection is possible within the Login Handler component. The issue occurs in the mysqli query function located in t...

7.5CVSS7AI score0.00263EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/05 12:00 a.m.•8 views

CVE-2026-105468: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects the function mysqliquery of the file Admin/mlogin.php of the component Login Handler. Performing a manipulation of the argument uname/pass results in sql...

7.5CVSS6.7AI score0.00263EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/05 12:00 a.m.•9 views

CVE-2026-105387: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects the function mysqliquery of the file cover.php of the component Patient Login Handler. The manipulation of the argument uname/psw results in sql...

7.5CVSS6.7AI score0.00328EPSS
SaveExploits0References3
Rows per page
Query Builder