CVE-2026-6182-SQLI-auth

SQL Injection Authentication Bypass - Simple Content Management System PHP Description A SQL Injection vulnerability exists in the admin login page of Simple Content Management System PHP. The user parameter is not sanitized before being passed to the SQL query, allowing an unauthenticated attack...

CVE-2026-37750

CVE-2026-37750 — School Management System 1.0 - Reflected XSS Details Field| Info ---|--- CVE ID| CVE-2026-37750 Type| Reflected Cross-Site Scripting XSS Severity| Medium CVSSv3: 6.1 Vendor| mahmoudai1 Product| School Management System Version| 1.0 Discoverer| Varad AP Mene Date| 2026-04-16 CWE|...

CVE-2022-45265

CVE-2022-45265 In the Sanitization Management System 1.0 distributed by sourcecodester.com curl --location --request POST 'http://localhost/php-sms/classes/Users.php?f=save' \ --form 'id="1"' \ --form 'firstname="HACKED"' \ --form 'lastname="Administrator"' \ --form 'username="admin"' \ --form...

CVE-2026-11344-RCE

Vehicle Management System In PHP - Unauthenticated Remote Code Execution via File Upload in newdriver.php Vulnerability Information Field| Details ---|--- Product| Vehicle Management System In PHP Vendor| code-projects.org Version| V1.0 Vulnerability Type| Unrestricted File Upload leading to Remo...

CVE-disclosures

CVE-2026-3171 & CVE-2026-3170 – Archana M Official vulnerability disclosures by Archana M. 🔹 CVE-2026-3171 Product: SourceCodester / Patrick Mvuma Patients Waiting Area Queue Management System 1.0 Vulnerability Type: Cross-Site Scripting CWE-79 Affected File: /queue.php Attack Vector: Remote User...

CVE-2026-7229-SQLI

Authenticated SQL Injection in Coaching Management System Allows Database Dump Description A SQL Injection vulnerability exists in the Coaching Management System in PHP. The complaintreply parameter in the admin reply functionality is not properly sanitized before being used in SQL queries. An...

CVE-2022-43144-Stored-XSS

CVE-2022-43144 : Stored-XSS Description A cross-site scripting XSS vulnerability in Canteen Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. Impact Allowing an attacker to hijack the user's session and take over the account. To exploit this...

CVE-2026-37272

CVE-2026-37272 CVE-2026-37272 Description A reflected cross-site scripting XSS vulnerability exists in /dashboard/settings.php in Bank Management System in Web 1.0. The vulnerability occurs due to improper sanitization of user-supplied input in the msg GET parameter. An attacker can craft a...

CVE-2022-41445

CVE-2022-41445 Cross Site Scripting in Teacher's Record Management System using CodeIgnitor Suggested description A cross-site scripting XSS vulnerability in Record Management System using CodeIgniter 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected int...

CVE-2022-28078

CVE-2022-28077 Home Owners Collection Management System 1.0 - Reflected XSS Exploit Title: Home Owners Collection Management System 1.0 - Reflected XSS Date: 2022-05-06 CVE: CVE-2022-28078 Exploit Author: Abdulaziz Saad @b4zb0z Vendor Homepage: https://www.sourcecodester.com/ Software Link:...

ReadyScript e-commerce management system Session Management

The vulnerability of the ReadyScript e-commerce management system is related to improper session management. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

ReadyScript e-commerce management system File Upload

The vulnerability of the ReadyScript e-commerce management system is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a remote attacker to load any desired files...

ReadyScript e-commerce management system Sequence Data Compromise

The vulnerability of the ReadyScript e-commerce management system is related to the improper implementation of the sequence of actions to be performed. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected informati...

ReadyScript e-commerce management system File Upload

The vulnerability of the ReadyScript e-commerce management system is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a remote attacker to load any desired files...

DIAFAN.CMS SQL Injection

The vulnerability of the DIAFAN.CMS website content management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Test IT SSRF

The vulnerability of the Test IT testing management system is related to insufficient testing of server-side requests. Exploiting this vulnerability allows a malicious actor to perform an SSRF attack remotely...

CVE-2026-10170-RCE

Visitor Management System 1.0 - SQLi to Remote Code Execution Attack Chain Vulnerability Information Field| Details ---|--- Product| Visitor Management System Vendor| code-projects.org Version| 1.0 Vulnerability Classes| SQL Injection CWE-89 + Unrestricted File Upload CWE-434 CVE ID| Pending CVSS...

CVE-2022-30514

CVE-2022-30514 School Dormitory Management System 1.0 - Reflected XSS Exploit Title: School Dormitory Management System 1.0 - Reflected XSS Date: 2022-05-25 CVE: CVE-2022-30514 Exploit Author: Abdulaziz Saad @b4zb0z Vendor Homepage: https://www.sourcecodester.com/ Software Link:...

CVE-2023-23279

SQL injection in Canteen Management System v1.0. Bug author: Tuannq Discovered Day: 5/1/2023 Vendors: https://www.sourcecodester.com/php/15688/canteen-management-system-project-source-code-php.html Login account: [email protected]/rootadmin Super Admin account Vulnerability File:...

CVE-2022-30512

CVE-2022-30512 School Dormitory Management System 1.0 - Unauthenticated SQL Injection Exploit Title: School Dormitory Management System 1.0 - Unauthenticated SQL Injection Date: 2022-05-25 CVE: CVE-2022-30512 Exploit Author: Abdulaziz Saad @b4zb0z Vendor Homepage: https://www.sourcecodester.com/...