Lucene search
+L

48 matches found

Vulnrichment
Vulnrichment
•added 2026/09/15 6:15 a.m.•15 views

CVE-2026-91005 SourceCodester Online Faculty Clearance System Profile Picture Upload edit_picture.php move_uploaded_file unrestricted upload

A vulnerability was found in SourceCodester Online Faculty Clearance System 1.0. This affects the function moveuploadedfile of the file production/editpicture.php of the component Profile Picture Upload. Performing a manipulation of the argument File results in unrestricted upload. The attack is...

6.5CVSS6.3AI score0.00366EPSS
SaveExploits0References6
CVE
CVE
•added 2026/09/15 6:00 a.m.•26 views

CVE-2026-91004

A SQL injection vulnerability exists in SourceCodester Online Faculty Clearance System 1.0 , specifically in the /delete_faculty1.php file. An unauthenticated remote attacker can manipulate the ID parameter to inject arbitrary SQL, potentially leading to low-impact confidentiality, integrity, and...

7.5CVSS6.9AI score0.00431EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/09/15 6:00 a.m.•13 views

CVE-2026-91004 SourceCodester Online Faculty Clearance System delete_faculty1.php sql injection

A vulnerability has been found in SourceCodester Online Faculty Clearance System 1.0. The impacted element is an unknown function of the file /deletefaculty1.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to th...

7.5CVSS6.9AI score0.00431EPSS
SaveExploits0References6
NVD
NVD
•added 2026/09/15 4:18 a.m.•11 views

CVE-2026-90876

A vulnerability has been found in SourceCodester Online Faculty Clearance System 1.0. Affected by this vulnerability is an unknown functionality of the file /deleterequirement.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The...

7.5CVSS0.00431EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/09/15 4:00 a.m.•14 views

CVE-2026-90877 SourceCodester Online Faculty Clearance System update_requirement_status.php sql injection

A vulnerability was found in SourceCodester Online Faculty Clearance System 1.0. Affected by this issue is some unknown functionality of the file /updaterequirementstatus.php. The manipulation of the argument haydi results in sql injection. It is possible to launch the attack remotely. The exploi...

7.5CVSS6.9AI score0.00431EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/09/15 3:45 a.m.•14 views

EUVD-2026-78262

A vulnerability has been found in SourceCodester Online Faculty Clearance System 1.0. Affected by this vulnerability is an unknown functionality of the file /deleterequirement.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The...

7.5CVSS7AI score0.00431EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/09/15 3:45 a.m.•12 views

CVE-2026-90876 SourceCodester Online Faculty Clearance System delete_requirement.php sql injection

A vulnerability has been found in SourceCodester Online Faculty Clearance System 1.0. Affected by this vulnerability is an unknown functionality of the file /deleterequirement.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The...

7.5CVSS6.9AI score0.00431EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•5 views

CVE-2026-91005: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in SourceCodester Online Faculty Clearance System 1.0. This affects the function moveuploadedfile of the file production/editpicture.php of the component Profile Picture Upload. Performing a manipulation of the argument File results in unrestricted upload. The attack is...

6.5CVSS6.2AI score0.00366EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•3 views

CVE-2026-91004: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in SourceCodester Online Faculty Clearance System 1.0. The impacted element is an unknown function of the file /deletefaculty1.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to th...

7.5CVSS7AI score0.00431EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•26 views

PT-2026-91874

Name of the Vulnerable Software and Affected Versions SourceCodester Online Faculty Clearance System version 1.0 Description An unrestricted file upload issue exists in the Profile Picture Upload component within the production/edit picture.php file. A remote attacker can manipulate the File...

6.5CVSS6.8AI score0.00366EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•4 views

CVE-2026-90877: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Online Faculty Clearance System 1.0. Affected by this issue is some unknown functionality of the file /updaterequirementstatus.php. The manipulation of the argument haydi results in sql injection. It is possible to launch the attack remotely. The exploi...

7.5CVSS7AI score0.00431EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•3 views

CVE-2026-90876: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in SourceCodester Online Faculty Clearance System 1.0. Affected by this vulnerability is an unknown functionality of the file /deleterequirement.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The...

7.5CVSS6.9AI score0.00431EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•13 views

EUVD-2024-16257

Malicious code in bioql PyPI...

9.8CVSS7AI score0.00537EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2024-16258

Malicious code in bioql PyPI...

9.8CVSS7AI score0.005EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•32 views

EUVD-2024-16259

Malicious code in bioql PyPI...

9.8CVSS7AI score0.00636EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•20 views

EUVD-2024-16256

Malicious code in bioql PyPI...

9.8CVSS7AI score0.005EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/05/23 9:33 a.m.•15 views

CVE-2024-0461

A vulnerability was found in code-projects Online Faculty Clearance 1.0. It has been classified as critical. Affected is an unknown function of the file deactivate.php of the component HTTP POST Request Handler. The manipulation of the argument haydi leads to sql injection. It is possible to laun...

9.8CVSS7.5AI score0.005EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 9:33 a.m.•17 views

CVE-2024-0464

A vulnerability classified as critical has been found in code-projects Online Faculty Clearance 1.0. This affects an unknown part of the file deletefaculty.php of the component HTTP GET Request Handler. The manipulation of the argument id leads to sql injection. It is possible to initiate the...

9.8CVSS7.5AI score0.00636EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 9:32 a.m.•25 views

CVE-2024-0462

A vulnerability was found in code-projects Online Faculty Clearance 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /production/designeeviewstatus.php of the component HTTP POST Request Handler. The manipulation of the argument haydi...

9.8CVSS9.8AI score0.00537EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 7:26 a.m.•19 views

CVE-2024-0463

A vulnerability was found in code-projects Online Faculty Clearance 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /production/adminviewinfo.php of the component HTTP POST Request Handler. The manipulation of the argument haydi leads to sql...

9.8CVSS9.7AI score0.005EPSS
SaveExploits0References1
Rows per page
Query Builder