Lucene search
+L

33 matches found

NVD
NVD
•added 2026/07/22 9:16 a.m.•22 views

CVE-2026-2406

Authorization bypass through User-Controlled key vulnerability in Universe Software Computer Marketing Trade and Industry Inc. Online Registration and Workflow Management System allows Exploiting Trust in Client. This issue affects Online Registration and Workflow Management System: through...

6.5CVSS0.00361EPSS
SaveExploits1References1
EUVD
EUVD
•added 2026/07/22 8:51 a.m.•21 views

EUVD-2026-47621

Authorization bypass through User-Controlled key vulnerability in Universe Software Computer Marketing Trade and Industry Inc. Online Registration and Workflow Management System allows Exploiting Trust in Client. This issue affects Online Registration and Workflow Management System: through...

6.5CVSS5.2AI score0.00361EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2026/07/22 8:51 a.m.•60 views

CVE-2026-2406 IDOR in Universe Software's Online Registration and Workflow Management System

Authorization bypass through User-Controlled key vulnerability in Universe Software Computer Marketing Trade and Industry Inc. Online Registration and Workflow Management System allows Exploiting Trust in Client. This issue affects Online Registration and Workflow Management System: through...

6.5CVSS0.00361EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2026/07/22 8:51 a.m.•15 views

CVE-2026-2406

Authorization bypass through User-Controlled key vulnerability in Universe Software Computer Marketing Trade and Industry Inc. Online Registration and Workflow Management System allows Exploiting Trust in Client. This issue affects Online Registration and Workflow Management System: through...

6.5CVSS5.2AI score0.00361EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2026/07/22 8:51 a.m.•11 views

CVE-2026-2406 IDOR in Universe Software's Online Registration and Workflow Management System

Authorization bypass through User-Controlled key vulnerability in Universe Software Computer Marketing Trade and Industry Inc. Online Registration and Workflow Management System allows Exploiting Trust in Client. This issue affects Online Registration and Workflow Management System: through...

6.5CVSS5.9AI score0.00361EPSS
SaveExploits1References1
CVE
CVE
•added 2026/07/22 8:51 a.m.•81 views

CVE-2026-2406

An authorization bypass in Universe Software's Online Registration and Workflow Management System (through 12022026) is reported as CVE-2026-2406. The vulnerability stems from a user-controlled key, enabling unauthorized access. CVSS v3.1 vector: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N; base score 6....

6.5CVSS5.9AI score0.00361EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/22 12:00 a.m.•3 views

CVE-2026-2406: Authorization Bypass Through User-Controlled Key

Authorization bypass through User-Controlled key vulnerability in Universe Software Computer Marketing Trade and Industry Inc. Online Registration and Workflow Management System allows Exploiting Trust in Client. This issue affects Online Registration and Workflow Management System: through...

6.5CVSS6AI score0.00361EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•20 views

EUVD-2021-9987

Malicious code in bioql PyPI...

8.8CVSS8.6AI score0.01028EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/05/19 10:00 a.m.•41 views

CVE-2025-4927 PHPGurukul Online Marriage Registration System between-dates-application-report.php sql injection

A vulnerability was found in PHPGurukul Online Marriage Registration System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/between-dates-application-report.php. The manipulation of the argument fromdate/todate leads to sql injection. It is possible to...

7.5CVSS0.00507EPSS
SaveExploits1References5
Schneier on Security
Schneier on Security
•added 2022/10/13 11:19 a.m.•17 views

Digital License Plates

California just legalized digital license plates, which seems like a solution without a problem. The Rplate can reportedly function in extreme temperatures, has some customization features, and is managed via Bluetooth using a smartphone app. Rplates are also equipped with an LTE antenna, which c...

2.1AI score
SaveExploits0
Prion
Prion
•added 2022/08/19 2:15 a.m.•29 views

Cross site scripting

Cross Site Scripting XSS vulnerability exists in the phpgurukul Online Marriage Registration System 1.0 allows attackers to run arbitrary code via the wzipcode field...

4.9CVSS5.4AI score0.0062EPSS
SaveExploits1References2Affected Software1
CNVD
CNVD
•added 2021/12/29 12:00 a.m.•41 views

PayPal Free Source Code Access Control Error Vulnerability

PayPal Free Source Code is an online registration management system. An access control error vulnerability exists in PayPal Free Source Code, which stems from the product's failure to validate privileges when obtaining PHP and PayPal Free Source 1.0 product code, and can be exploited by an attack...

6.5CVSS6.8AI score0.00843EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/12/09 12:00 a.m.•49 views

PayPal Free Source Code has an unspecified vulnerability

PayPal Free Source Code is an online registration management system. A security vulnerability exists in PayPal Free Source Code 1.0 online registration management system, which allows attackers to obtain sensitive information and execute arbitrary SQL commands via the IDNO parameter...

7.2CVSS6.4AI score0.01525EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2021/12/07 12:00 a.m.•17 views

PayPal Free Source Code SQL注入漏洞

PayPal Free Source Code is an online registration management system. A security vulnerability exists in PayPal Free Source Code 1.0 online registration management system, which allows attackers to obtain sensitive information and execute arbitrary SQL commands via the IDNO parameter...

7.2CVSS6.2AI score0.01525EPSS
SaveExploits1References3
CNVD
CNVD
•added 2021/02/05 12:00 a.m.•8 views

Unauthorized Access Vulnerability in Waychar Enrollment System

Waychar Registration System is an online registration system developed for sporting events and other general purpose activities. An unauthorized access vulnerability exists in the Waychar registration system, which can be exploited by attackers to obtain sensitive information...

6.8AI score
SaveExploits0
NVD
NVD
•added 2021/01/19 10:15 a.m.•19 views

CVE-2021-22852

HGiga EIP product contains SQL Injection vulnerability. Attackers can inject SQL commands into specific URL parameter online registration to obtain database schema and data...

8.8CVSS9.2AI score0.01028EPSS
SaveExploits0References2
Prion
Prion
•added 2021/01/19 10:15 a.m.•28 views

Sql injection

HGiga EIP product contains SQL Injection vulnerability. Attackers can inject SQL commands into specific URL parameter online registration to obtain database schema and data...

6.5CVSS9AI score0.01028EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
•added 2021/01/19 8:53 a.m.•11 views

CVE-2021-22852

HGiga EIP product contains SQL Injection vulnerability. Attackers can inject SQL commands into specific URL parameter online registration to obtain database schema and data...

8.8CVSS7.3AI score0.01028EPSS
SaveExploits0References3Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/01/19 12:00 a.m.•4 views

CVE-2021-22852: Improper Neutralization of Special Elements used in an SQL Command

HGiga EIP product contains SQL Injection vulnerability. Attackers can inject SQL commands into specific URL parameter online registration to obtain database schema and data...

8.8CVSS5.8AI score0.01028EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2021/01/19 12:00 a.m.•13 views

HGiga EIP SQL Injection Vulnerability

A SQL injection vulnerability exists in HGiga EIP product, which can be exploited by an attacker to obtain database schema and data by injecting SQL commands into specific URL parameters online registration...

8.8CVSS5.9AI score0.01028EPSS
SaveExploits0References2
Rows per page
Query Builder