Lucene search
+L

45 matches found

NVD
NVD
•added 2026/03/22 8:15 a.m.•14 views

CVE-2026-4540

A vulnerability was detected in projectworlds Online Notes Sharing System 1.0. This issue affects some unknown processing of the file /login.php of the component Parameters Handler. The manipulation of the argument User results in sql injection. The attack can be executed remotely. The exploit is...

7.5CVSS0.00411EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2026/03/22 7:41 a.m.•24 views

CVE-2026-4540

A vulnerability was detected in projectworlds Online Notes Sharing System 1.0. This issue affects some unknown processing of the file /login.php of the component Parameters Handler. The manipulation of the argument User results in sql injection. The attack can be executed remotely. The exploit is...

7.5CVSS6.8AI score0.00411EPSS
SaveExploits0References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/22 12:00 a.m.•3 views

CVE-2026-4540: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in projectworlds Online Notes Sharing System 1.0. This issue affects some unknown processing of the file /login.php of the component Parameters Handler. The manipulation of the argument User results in sql injection. The attack can be executed remotely. The exploit is...

7.5CVSS7.1AI score0.00411EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/11/08 4:54 p.m.•33 views

CVE-2025-12862

A vulnerability was identified in projectworlds Online Notes Sharing Platform 1.0. Affected by this issue is some unknown functionality of the file /dashboard/userprofile.php. Such manipulation of the argument image leads to unrestricted upload. The attack may be performed from remote. The exploi...

9.8CVSS6.4AI score0.00396EPSS
SaveExploits1References1
NVD
NVD
•added 2025/11/07 5:15 p.m.•51 views

CVE-2025-12862

A vulnerability was identified in projectworlds Online Notes Sharing Platform 1.0. Affected by this issue is some unknown functionality of the file /dashboard/userprofile.php. Such manipulation of the argument image leads to unrestricted upload. The attack may be performed from remote. The exploi...

9.8CVSS0.00396EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/07 12:00 a.m.•5 views

CVE-2025-12862: Unrestricted Upload of File with Dangerous Type

A vulnerability was identified in projectworlds Online Notes Sharing Platform 1.0. Affected by this issue is some unknown functionality of the file /dashboard/userprofile.php. Such manipulation of the argument image leads to unrestricted upload. The attack may be performed from remote. The exploi...

9.8CVSS6.4AI score0.00396EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2025/11/07 12:00 a.m.•32 views

PT-2025-45467

Name of the Vulnerable Software and Affected Versions projectworlds Online Notes Sharing Platform version 1.0 Description A flaw exists in projectworlds Online Notes Sharing Platform that allows for unrestricted file uploads. This issue is related to the manipulation of the image argument within...

9.8CVSS6.5AI score0.00396EPSS
SaveExploits1References9
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•23 views

EUVD-2023-59239

Malicious code in bioql PyPI...

5CVSS4.9AI score0.00368EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•20 views

EUVD-2025-20327

Malicious code in bioql PyPI...

9.8CVSS7.5AI score0.00581EPSS
SaveExploits1References6
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•23 views

EUVD-2023-59241

Malicious code in bioql PyPI...

6.5CVSS5.7AI score0.00512EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•21 views

EUVD-2023-59242

Malicious code in bioql PyPI...

5.4CVSS5AI score0.00466EPSS
SaveExploits1References3
OSV
OSV
•added 2025/08/14 6:15 a.m.•13 views

CVE-2025-8946

A vulnerability has been found in projectworlds Online Notes Sharing Platform 1.0. This vulnerability affects unknown code of the file /login.php. The manipulation of the argument User leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and m...

9.8CVSS5.8AI score0.00421EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/14 12:00 a.m.•2 views

CVE-2025-8946: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in projectworlds Online Notes Sharing Platform 1.0. This vulnerability affects unknown code of the file /login.php. The manipulation of the argument User leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and m...

9.8CVSS5.5AI score0.00421EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/07/08 1:03 a.m.•33 views

CVE-2025-7155 PHPGurukul Online Notes Sharing System Cookie Dashboard sql injection

A vulnerability, which was classified as critical, was found in PHPGurukul Online Notes Sharing System 1.0. This affects an unknown part of the file /Dashboard of the component Cookie Handler. The manipulation of the argument sessionid leads to sql injection. It is possible to initiate the attack...

7.5CVSS0.00581EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/08 12:00 a.m.•8 views

CVE-2025-7155: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in PHPGurukul Online Notes Sharing System 1.0. This affects an unknown part of the file /Dashboard of the component Cookie Handler. The manipulation of the argument sessionid leads to sql injection. It is possible to initiate the attack...

9.8CVSS5.5AI score0.00581EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/07/08 12:00 a.m.•21 views

PT-2025-28302 · Unknown · Phpgurukul Online Notes Sharing System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Notes Sharing System version 1.0 Description: A critical issue was found in the PHPGurukul Online Notes Sharing System, affecting an unknown part of the file /Dashboard of the component Cookie Handler. The manipulation of th...

9.8CVSS7.6AI score0.00581EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
•added 2024/12/18 12:00 a.m.•6 views

PT-2024-36497

Name of the Vulnerable Software and Affected Versions PHPGurukul Online Notes Sharing Management System version 1.0 Description An IDOR vulnerability in the edit-notes.php module allows unauthorized users to modify notes belonging to other accounts due to missing authorization checks. This flaw...

4.3CVSS0.00339EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/18 12:00 a.m.•4 views

CVE-2024-55232: Authentication Bypass by Spoofing

An IDOR vulnerability in the manage-notes.php module in PHPGurukul Online Notes Sharing Management System v1.0 allows unauthorized users to delete notes belonging to other accounts due to missing authorization checks. This flaw enables attackers to delete another user's information...

5.4CVSS5.8AI score0.00384EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/12/18 12:00 a.m.•17 views

PHPGurukul Online Notes Sharing Management System 安全漏洞

PHPGurukul Online Notes Sharing Management System is an online notes sharing management system from PHPGurukul Inc. A security vulnerability exists in PHPGurukul Online Notes Sharing Management System v1.0, which stems from a lack of authorization checking and an IDOR vulnerability that allows...

5.4CVSS6.6AI score0.00384EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/18 12:00 a.m.•10 views

CVE-2024-55231: Authorization Bypass Through User-Controlled Key

An IDOR vulnerability in the edit-notes.php module of PHPGurukul Online Notes Sharing Management System v1.0 allows unauthorized users to modify notes belonging to other accounts due to missing authorization checks. This flaw exposes sensitive data and enables attackers to alter another user's...

4.3CVSS5.8AI score0.00339EPSS
SaveExploits1References1
Rows per page
Query Builder