Lucene search
+L

152 matches found

VulnCheck KEV
VulnCheck KEV
•added 2026/09/14 12:00 a.m.•9 views

VulnCheck KEV: CVE-2022-32028

Car Rental Management System v1.0 is vulnerable to SQL Injection via /car-rental-management-system/admin/manageuser.php?id=...

7.2CVSS7.2AI score0.05059EPSS
SaveIn wildExploits1References17
NVD
NVD
•added 2026/06/04 2:16 p.m.•33 views

CVE-2026-10809

A security flaw has been discovered in itsourcecode Fees Management System 1.0. This impacts an unknown function of the file /manageuser.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be...

6.5CVSS0.002EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/04 12:00 a.m.•1 views

CVE-2026-10809: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in itsourcecode Fees Management System 1.0. This impacts an unknown function of the file /manageuser.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be...

6.5CVSS6.5AI score0.002EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/06/04 12:00 a.m.•23 views

itsourcecode Fees Management System SQL注入漏洞

itsourcecode Fees Management System is an open-source charging management system developed by itsourcecode. Version 1.0 of the itsourcecode Fees Management System has a SQL injection vulnerability. This vulnerability arises from unknown functions in the /manageuser.php file, which improperly hand...

6.5CVSS6.7AI score0.002EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/27 12:00 a.m.•1 views

CVE-2026-9606: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in itsourcecode Courier Management System 1.0. Impacted is an unknown function of the file /manageuser.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to the public and may be...

7.5CVSS6.9AI score0.00411EPSS
SaveExploits0References3
CVE
CVE
•added 2026/05/26 11:30 p.m.•44 views

CVE-2026-9606

The vulnerability CVE-2026-9606 affects itsourcecode Courier Management System 1.0, specifically the /manage_user.php component. The root cause is manipulation of the ID parameter that leads to a SQL injection, with remote exploitation confirmed and a public exploit disclosed. The CVSS-based data...

7.5CVSS6.9AI score0.00411EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/05/26 11:30 p.m.•25 views

EUVD-2026-32024

A vulnerability has been found in itsourcecode Courier Management System 1.0. Impacted is an unknown function of the file /manageuser.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to the public and may be...

7.5CVSS6.8AI score0.00411EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/16 12:00 a.m.•1 views

CVE-2026-37343: Improper Neutralization of Special Elements used in an SQL Command

SourceCodester Vehicle Parking Area Management System v1.0 is vulnerable to SQL Injection in the file /parking/manageuser.php...

7.2CVSS5.8AI score0.00448EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/14 12:00 a.m.•2 views

CVE-2026-37602: Improper Neutralization of Special Elements used in an SQL Command

SourceCodester Patient Appointment Scheduler System v1.0 is vulnerable to SQL Injection in the file /scheduler/admin/user/manageuser.php...

2.7CVSS5.8AI score0.00311EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/03/31 11:00 p.m.•13 views

CVE-2026-5237

A security flaw has been discovered in itsourcecode Payroll Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /manageuser.php of the component Parameter Handler. Performing a manipulation of the argument ID results in sql injection. The attack is possib...

7.5CVSS5.7AI score0.00411EPSS
SaveExploits0References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/31 12:00 a.m.•0 views

CVE-2026-5237: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in itsourcecode Payroll Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /manageuser.php of the component Parameter Handler. Performing a manipulation of the argument ID results in sql injection. The attack is possib...

7.5CVSS7AI score0.00411EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/02 12:00 a.m.•3 views

CVE-2026-26708: Improper Neutralization of Special Elements used in an SQL Command

sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/manageuser.php...

9.8CVSS5.7AI score0.0052EPSS
SaveExploits1References1
NVD
NVD
•added 2026/02/09 6:16 a.m.•21 views

CVE-2026-2217

A vulnerability was found in itsourcecode Event Management System 1.0. The impacted element is an unknown function of the file /admin/manageuser.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and could be us...

9.8CVSS0.00343EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2026/02/09 5:32 a.m.•45 views

CVE-2026-2217 itsourcecode Event Management System manage_user.php sql injection

A vulnerability was found in itsourcecode Event Management System 1.0. The impacted element is an unknown function of the file /admin/manageuser.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and could be us...

7.5CVSS0.00343EPSS
SaveExploits1References5
CVE
CVE
•added 2026/02/09 5:32 a.m.•42 views

CVE-2026-2217

CVE-2026-2217 affects itsourcecode Event Management System 1.0. The vulnerable element is /admin/manage_user.php; manipulating the ID parameter yields SQL injection. Exploitation can be remote and publicly disclosed. CVSS data from sources show high impact under various vectors (NVD CVSS3.1 base ...

9.8CVSS6.9AI score0.00343EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2026/02/09 5:32 a.m.•9 views

CVE-2026-2217 itsourcecode Event Management System manage_user.php sql injection

A vulnerability was found in itsourcecode Event Management System 1.0. The impacted element is an unknown function of the file /admin/manageuser.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and could be us...

7.5CVSS6.9AI score0.00343EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/09 12:00 a.m.•1 views

CVE-2026-2217: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in itsourcecode Event Management System 1.0. The impacted element is an unknown function of the file /admin/manageuser.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and could be us...

9.8CVSS7AI score0.00343EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/11/03 12:32 a.m.•17 views

EUVD-2025-37463

A security flaw has been discovered in itsourcecode Online Loan Management System 1.0. The affected element is an unknown function of the file /manageuser.php. Performing manipulation of the argument ID results in sql injection. The attack is possible to be carried out remotely. The exploit has...

7.5CVSS6.4AI score0.00445EPSS
SaveExploits1References6
CVE
CVE
•added 2025/11/03 12:32 a.m.•31 views

CVE-2025-12608

CVE-2025-12608 affects itsourcecode Online Loan Management System 1.0. The vulnerability is in an unknown function within /manage_user.php where manipulation of the ID parameter enables SQL injection. The issue is exploitable remotely and the exploit has been released publicly. Multiple connected...

9.8CVSS7AI score0.00445EPSS
SaveExploits1References5Affected Software1
CNNVD
CNNVD
•added 2025/11/03 12:00 a.m.•13 views

itsourcecode Online Loan Management System SQL注入漏洞

itsourcecode Online Loan Management System is an online loan management system from itsourcecode open source. A SQL injection vulnerability exists in version 1.0 of itsourcecode Online Loan Management System, which stems from incorrect manipulation of the parameter ID in the file /manageuser.php,...

9.8CVSS7.7AI score0.00445EPSS
SaveExploits1References6
Rows per page
Query Builder