Lucene search
+L

33609 matches found

Vulnrichment
Vulnrichment
added 2026/01/29 2:02 p.m.5 views

CVE-2026-1590 itsourcecode School Management System index.php sql injection

A vulnerability was identified in itsourcecode School Management System 1.0. This impacts an unknown function of the file /ramonsys/faculty/index.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be...

7.5CVSS5.8AI score0.00385EPSS
SaveExploits1References5
EUVD
EUVD
added 2026/01/29 2:02 p.m.10 views

EUVD-2026-4988

A vulnerability was identified in itsourcecode School Management System 1.0. This impacts an unknown function of the file /ramonsys/faculty/index.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be...

7.5CVSS5.8AI score0.00385EPSS
SaveExploits1References5
CVE
CVE
added 2026/01/29 2:02 p.m.47 views

CVE-2026-1590

The CVE-2026-1590 entry concerns itsourcecode School Management System 1.0. The issue is a SQL injection in the file /ramonsys/faculty/index.php caused by manipulating the ID argument. This vulnerability can be exploited remotely, and a public exploit is available. Affected product: itsourcecode ...

9.8CVSS5.8AI score0.00385EPSS
SaveExploits1References5Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/01/29 2:02 p.m.5 views

CVE-2026-1589

A vulnerability was determined in itsourcecode School Management System 1.0. This affects an unknown function of the file /ramonsys/inquiry/index.php. This manipulation of the argument txtsearch causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed an...

7.5CVSS5.8AI score0.00385EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2026/01/29 2:02 p.m.49 views

CVE-2026-1589 itsourcecode School Management System index.php sql injection

A vulnerability was determined in itsourcecode School Management System 1.0. This affects an unknown function of the file /ramonsys/inquiry/index.php. This manipulation of the argument txtsearch causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed an...

7.5CVSS0.00385EPSS
SaveExploits1References5
CVE
CVE
added 2026/01/29 2:02 p.m.30 views

CVE-2026-1589

The CVE-2026-1589 entry affects itsourcecode School Management System 1.0. A SQL injection vulnerability exists in the /ramonsys/inquiry/index.php file, triggered by manipulating the txtsearch argument. This can be exploited remotely and has public disclosure. Affects an unknown function within t...

9.8CVSS5.8AI score0.00385EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2026/01/29 2:02 p.m.7 views

CVE-2026-1589 itsourcecode School Management System index.php sql injection

A vulnerability was determined in itsourcecode School Management System 1.0. This affects an unknown function of the file /ramonsys/inquiry/index.php. This manipulation of the argument txtsearch causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed an...

7.5CVSS5.8AI score0.00385EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
added 2026/01/29 9:24 a.m.21 views

CVE-2026-1514

Official Document Management System developed by 2100 Technology has a Incorrect Authorization vulnerability, allowing authenticated remote attackers to modify front-end code to read all official documents...

7.1CVSS6AI score0.00264EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/29 3:26 a.m.24 views

CVE-2026-24838

DNN formerly DotNetNuke is an open-source web content management platform CMS in the Microsoft ecosystem. Prior to versions 9.13.10 and 10.2.0, module title supports richtext which could include scripts that would execute in certain scenarios. Versions 9.13.10 and 10.2.0 contain a fix for the iss...

9.1CVSS6AI score0.00191EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/01/29 12:31 a.m.16 views

EUVD-2026-4853

A weakness has been identified in itsourcecode School Management System 1.0. The affected element is an unknown function of the file /course/index.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been made availab...

7.5CVSS5.8AI score0.00399EPSS
SaveExploits1References6
OSV
OSV
added 2026/01/29 12:16 a.m.11 views

CVE-2026-1551

A weakness has been identified in itsourcecode School Management System 1.0. This affects an unknown part of the file /ramonsys/course/controller.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been made available to...

8.8CVSS5.8AI score0.00376EPSS
SaveExploits1References6
NVD
NVD
added 2026/01/29 12:16 a.m.12 views

CVE-2026-1551

A weakness has been identified in itsourcecode School Management System 1.0. This affects an unknown part of the file /ramonsys/course/controller.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been made available to...

8.8CVSS0.00376EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2026/01/29 12:00 a.m.18 views

PT-2026-5303

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Global Interactive Design Media Software Inc. Content Management System CMS allows Command Line Execution through SQL Injection.This issue affects Content Management System CMS: through 21072025...

7.5CVSS5.9AI score0.00327EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/01/29 12:00 a.m.23 views

Global Interactive Design Media Content Management System SQL Injection Vulnerability

Global Interactive Design Media Content Management System is a content management system developed by the Turkish company Global Interactive Design Media. The versions of the Global Interactive Design Media Content Management System prior to version 21072025 have a SQL injection vulnerability. Th...

9.8CVSS6AI score0.00327EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/01/29 12:00 a.m.15 views

Prime cross-site request forgeing vulnerability

Prime is a content management system developed by Birkir Gudjonsson. Versions of Prime prior to 0.4.0.beta.0 contained a cross-site request forgeing vulnerability. This vulnerability stemmed from cross-site request forgery in the GraphQL endpoints, which could allow attackers to trigger...

5.3CVSS5.7AI score0.00146EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/01/29 12:00 a.m.19 views

PT-2026-5296

Name of the Vulnerable Software and Affected Versions itsourcecode School Management System version 1.0 Description A flaw exists in itsourcecode School Management System 1.0 that allows for SQL injection. The issue is located in the file /ramonsys/inquiry/index.php and involves manipulation of t...

9.8CVSS7.1AI score0.00385EPSS
SaveExploits1References10
Positive Technologies
Positive Technologies
added 2026/01/29 12:00 a.m.12 views

PT-2026-5295

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Global Interactive Design Media Software Inc. Content Management System CMS allows XSS Through HTTP Headers.This issue affects Content Management System CMS: through 21072025...

7.5CVSS5.9AI score0.00178EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/01/29 12:00 a.m.18 views

ITSsourcecode School Management System SQL Injection Vulnerability

itsourcecode School Management System is an open-source school management system developed by itsourcecode. Version 1.0 of itsourcecode School Management System has a SQL injection vulnerability. This vulnerability arises from incorrect handling of the parameter “txtsearch” in the file...

9.8CVSS7.2AI score0.00385EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2026/01/29 12:00 a.m.16 views

ITSsourcecode School Management System SQL Injection Vulnerability

itsourcecode School Management System is an open-source school management system developed by itsourcecode. Version 1.0 of itsourcecode School Management System has a SQL injection vulnerability. This vulnerability arises from incorrect handling of parameter IDs in the file...

9.8CVSS7.2AI score0.00385EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2026/01/29 12:00 a.m.37 views

PT-2026-5299

A security vulnerability has been detected in itsourcecode Society Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/add expenses.php. The manipulation of the argument detail leads to sql injection. Remote exploitation of the attack is possible. The...

7.5CVSS5.7AI score0.00486EPSS
SaveExploits1References6
Rows per page
Query Builder