Lucene search
K

981 matches found

RedhatCVE
RedhatCVE
added 2026/04/06 5:0 p.m.2 views

CVE-2026-5564

A weakness has been identified in code-projects Simple Laundry System 1.0. Affected by this vulnerability is an unknown functionality of the file /searchguest.php of the component Parameter Handler. This manipulation of the argument searchServiceId causes sql injection. The attack may be initiate...

7.5CVSS6.8AI score0.00043EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/04/06 5:0 p.m.2 views

CVE-2026-5579

A vulnerability was determined in CodeAstro Online Classroom 1.0. This issue affects some unknown processing of the file /OnlineClassroom/updatedetailsfromfaculty.php?myfid=108 of the component Parameter Handler. Executing a manipulation of the argument fname can lead to sql injection. The attack...

6.5CVSS6.5AI score0.00012EPSS
Exploits0References1
EUVD
EUVD
added 2026/04/06 3:31 p.m.2 views

EUVD-2026-19239

A vulnerability was determined in itsourcecode Construction Management System 1.0. The impacted element is an unknown function of the file /borrowedequip.php of the component Parameter Handler. This manipulation of the argument emp causes sql injection. The attack may be initiated remotely. The...

6.5CVSS6.5AI score0.00036EPSS
Exploits0References6
CVE
CVE
added 2026/04/06 1:45 p.m.4 views

CVE-2026-5660

CVE-2026-5660 affects itsourcecode Construction Management System 1.0. The vulnerability is an SQL injection in the Parameter Handler’s unknown function for the file /borrowed_equip.php, triggered by manipulating the emp argument. This may be exploited remotely, with exploit maturity listed as PR...

6.5CVSS6.5AI score0.00036EPSS
Exploits0References5
Cvelist
Cvelist
added 2026/04/06 1:45 p.m.24 views

CVE-2026-5660 itsourcecode Construction Management System Parameter borrowed_equip.php sql injection

A vulnerability was determined in itsourcecode Construction Management System 1.0. The impacted element is an unknown function of the file /borrowedequip.php of the component Parameter Handler. This manipulation of the argument emp causes sql injection. The attack may be initiated remotely. The...

6.5CVSS0.00036EPSS
Exploits0References5
EUVD
EUVD
added 2026/04/06 12:32 p.m.0 views

EUVD-2026-19227

A flaw has been found in code-projects Simple Laundry System 1.0. This vulnerability affects unknown code of the file /userfinishregister.php of the component Parameter Handler. This manipulation of the argument firstName causes sql injection. Remote exploitation of the attack is possible. The...

7.5CVSS6.8AI score0.00043EPSS
Exploits0References6
EUVD
EUVD
added 2026/04/06 12:32 p.m.0 views

EUVD-2026-19221

A weakness has been identified in projectworlds Car Rental System 1.0. Affected by this vulnerability is an unknown functionality of the file /pay.php of the component Parameter Handler. Executing a manipulation of the argument mpesa can lead to sql injection. The attack can be launched remotely...

7.5CVSS6.9AI score0.0004EPSS
Exploits0References5
NVD
NVD
added 2026/04/06 11:17 a.m.1 views

CVE-2026-5648

A flaw has been found in code-projects Simple Laundry System 1.0. This vulnerability affects unknown code of the file /userfinishregister.php of the component Parameter Handler. This manipulation of the argument firstName causes sql injection. Remote exploitation of the attack is possible. The...

7.5CVSS0.00043EPSS
Exploits0References5
CVE
CVE
added 2026/04/06 11:0 a.m.5 views

CVE-2026-5648

The CVE-2026-5648 entry concerns code-projects Simple Laundry System 1.0. Affects unknown code in the file /userfinishregister.php within the Parameter Handler component. The vulnerability arises from manipulation of the firstName argument, enabling SQL injection. Remote exploitation is possible ...

7.5CVSS6.8AI score0.00043EPSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2026/04/06 11:0 a.m.2 views

CVE-2026-5648

A flaw has been found in code-projects Simple Laundry System 1.0. This vulnerability affects unknown code of the file /userfinishregister.php of the component Parameter Handler. This manipulation of the argument firstName causes sql injection. Remote exploitation of the attack is possible. The...

7.5CVSS6.8AI score0.00043EPSS
Exploits0References5Affected Software1
RedhatCVE
RedhatCVE
added 2026/04/06 10:57 a.m.1 views

CVE-2026-5558

A flaw has been found in PHPGurukul PHPGurukul Online Shopping Portal Project up to 2.1. Impacted is an unknown function of the file /pending-orders.php of the component Parameter Handler. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely...

6.5CVSS6.3AI score0.00012EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/04/06 10:57 a.m.1 views

CVE-2026-5553

A vulnerability was identified in itsourcecode Online Cellphone System 1.0. Affected by this vulnerability is an unknown functionality of the file /cp/available.php of the component Parameter Handler. Such manipulation of the argument Name leads to sql injection. The attack can be launched...

6.5CVSS6.5AI score0.00012EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/04/06 10:57 a.m.2 views

CVE-2026-5554

A security flaw has been discovered in code-projects Concert Ticket Reservation System 1.0. Affected by this issue is some unknown functionality of the file /ConcertTicketReservationSystem-master/processsearch.php of the component Parameter Handler. Performing a manipulation of the argument...

7.5CVSS6.8AI score0.00043EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/04/06 10:57 a.m.2 views

CVE-2026-5551

A security flaw has been discovered in itsourcecode Free Hotel Reservation System 1.0. This vulnerability affects unknown code of the file /hotel/admin/login.php of the component Parameter Handler. The manipulation of the argument email results in sql injection. The attack may be launched remotel...

7.5CVSS6.9AI score0.00043EPSS
Exploits0References1
EUVD
EUVD
added 2026/04/06 9:31 a.m.0 views

EUVD-2026-19200

A vulnerability was identified in projectworlds Car Rental Project 1.0. Affected by this vulnerability is an unknown functionality of the file /bookcar.php of the component Parameter Handler. The manipulation of the argument fname leads to sql injection. The attack can be initiated remotely. The...

7.5CVSS5.8AI score0.0004EPSS
Exploits0References5
EUVD
EUVD
added 2026/04/06 9:31 a.m.1 views

EUVD-2026-19203

A security vulnerability has been detected in projectworlds Car Rental System 1.0. This vulnerability affects unknown code of the file /messageadmin.php of the component Parameter Handler. Such manipulation of the argument Message leads to sql injection. The attack may be launched remotely. The...

7.5CVSS5.8AI score0.0004EPSS
Exploits0References5
NVD
NVD
added 2026/04/06 9:16 a.m.5 views

CVE-2026-5639

A flaw has been found in PHPGurukul Online Shopping Portal Project 2.1. Impacted is an unknown function of the file /admin/update-image3.php of the component Parameter Handler. Executing a manipulation of the argument filename can lead to sql injection. The attack can be executed remotely. The...

6.5CVSS0.00012EPSS
Exploits0References5
NVD
NVD
added 2026/04/06 9:16 a.m.8 views

CVE-2026-5640

A vulnerability has been found in PHPGurukul Online Shopping Portal Project 2.1. The affected element is an unknown function of the file /admin/update-image2.php of the component Parameter Handler. The manipulation of the argument filename leads to sql injection. The attack is possible to be...

6.5CVSS0.00036EPSS
Exploits0References5
NVD
NVD
added 2026/04/06 9:16 a.m.0 views

CVE-2026-5637

A security vulnerability has been detected in projectworlds Car Rental System 1.0. This vulnerability affects unknown code of the file /messageadmin.php of the component Parameter Handler. Such manipulation of the argument Message leads to sql injection. The attack may be launched remotely. The...

7.5CVSS0.0004EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2026/04/06 9:15 a.m.1 views

CVE-2026-5641

A vulnerability was found in PHPGurukul Online Shopping Portal Project 2.1. The impacted element is an unknown function of the file /admin/update-image1.php of the component Parameter Handler. The manipulation of the argument filename results in sql injection. The attack may be performed from...

6.5CVSS6.3AI score0.00036EPSS
Exploits0References5Affected Software1
Rows per page
Query Builder