Lucene search
+L

1344 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/05 12:00 a.m.•2 views

CVE-2026-5565: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in code-projects Simple Laundry System 1.0. Affected by this issue is some unknown functionality of the file /delmemberinfo.php of the component Parameter Handler. Such manipulation of the argument userid leads to sql injection. The attack may be launche...

7.5CVSS5.5AI score0.00411EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/05 12:00 a.m.•2 views

CVE-2026-5564: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in code-projects Simple Laundry System 1.0. Affected by this vulnerability is an unknown functionality of the file /searchguest.php of the component Parameter Handler. This manipulation of the argument searchServiceId causes sql injection. The attack may be initiate...

7.5CVSS5.6AI score0.00411EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/04/05 12:00 a.m.•21 views

PT-2026-30422

A weakness has been identified in PHPGurukul Online Shopping Portal Project 2.1. This issue affects some unknown processing of the file /sub-category.php of the component Parameter Handler. This manipulation of the argument pid causes sql injection. Remote exploitation of the attack is possible...

6.5CVSS5.7AI score0.00316EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/05 12:00 a.m.•1 views

CVE-2026-5579: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in CodeAstro Online Classroom 1.0. This issue affects some unknown processing of the file /OnlineClassroom/updatedetailsfromfaculty.php?myfid=108 of the component Parameter Handler. Executing a manipulation of the argument fname can lead to sql injection. The attack...

6.5CVSS5.5AI score0.00316EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/05 12:00 a.m.•2 views

CVE-2026-5558: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in PHPGurukul PHPGurukul Online Shopping Portal Project up to 2.1. Impacted is an unknown function of the file /pending-orders.php of the component Parameter Handler. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely...

6.5CVSS5.4AI score0.00316EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/04/05 12:00 a.m.•19 views

PT-2026-30450

A security vulnerability has been detected in PHPGurukul Online Shopping Portal Project 2.1. This affects an unknown part of the file /my-profile.php of the component Parameter Handler. The manipulation of the argument fullname leads to sql injection. It is possible to initiate the attack remotel...

6.5CVSS5.7AI score0.00316EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/04/05 12:00 a.m.•27 views

PT-2026-30412

A vulnerability has been found in code-projects Simple Laundry System 1.0. This vulnerability affects unknown code of the file /modifymember.php of the component Parameter Handler. Such manipulation of the argument firstName leads to sql injection. The attack can be launched remotely. The exploit...

7.5CVSS5.8AI score0.00411EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/04/05 12:00 a.m.•25 views

PT-2026-30405

A vulnerability was identified in itsourcecode Online Enrollment System 1.0. This affects an unknown function of the file /sms/user/index.php?view=edit&id=10 of the component Parameter Handler. Such manipulation of the argument USERID leads to sql injection. The attack can be executed remotely. T...

7.5CVSS5.8AI score0.00411EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/05 12:00 a.m.•2 views

CVE-2026-5541: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in code-projects Simple Laundry System 1.0. This issue affects some unknown processing of the file /modmemberinfo.php of the component Parameter Handler. Performing a manipulation of the argument userid results in cross site scripting. The attack may be initiated remotel...

5.3CVSS3.9AI score0.00449EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/04/03 11:02 p.m.•13 views

CVE-2026-5368

A vulnerability was determined in projectworlds Car Rental Project 1.0. The affected element is an unknown function of the file /login.php of the component Parameter Handler. This manipulation of the argument uname causes sql injection. Remote exploitation of the attack is possible. The exploit h...

9.8CVSS6.8AI score0.00572EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/04/03 4:59 p.m.•14 views

CVE-2026-5334

A weakness has been identified in itsourcecode Online Enrollment System 1.0. Impacted is an unknown function of the file /enrollment/index.php?view=edit=3 of the component Parameter Handler. This manipulation of the argument deptid causes sql injection. The attack is possible to be carried out...

9.8CVSS6.8AI score0.00584EPSS
SaveExploits1References1
EUVD
EUVD
•added 2026/04/02 6:31 p.m.•29 views

EUVD-2026-18482

A vulnerability was determined in projectworlds Car Rental Project 1.0. The affected element is an unknown function of the file /login.php of the component Parameter Handler. This manipulation of the argument uname causes sql injection. Remote exploitation of the attack is possible. The exploit h...

7.5CVSS6.8AI score0.00572EPSS
SaveExploits1References5
attackerkb
attackerkb
•added 2026/04/02 5:15 p.m.•4 views

CVE-2026-5368

A vulnerability was determined in projectworlds Car Rental Project 1.0. The affected element is an unknown function of the file /login.php of the component Parameter Handler. This manipulation of the argument uname causes sql injection. Remote exploitation of the attack is possible. The exploit h...

7.5CVSS6.8AI score0.00572EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
•added 2026/04/02 5:15 p.m.•35 views

CVE-2026-5368 projectworlds Car Rental Project Parameter login.php sql injection

A vulnerability was determined in projectworlds Car Rental Project 1.0. The affected element is an unknown function of the file /login.php of the component Parameter Handler. This manipulation of the argument uname causes sql injection. Remote exploitation of the attack is possible. The exploit h...

7.5CVSS0.00572EPSS
SaveExploits1References4
NVD
NVD
•added 2026/04/02 2:16 p.m.•17 views

CVE-2026-5334

A weakness has been identified in itsourcecode Online Enrollment System 1.0. Impacted is an unknown function of the file /enrollment/index.php?view=edit&id=3 of the component Parameter Handler. This manipulation of the argument deptid causes sql injection. The attack is possible to be carried out...

9.8CVSS0.00584EPSS
SaveExploits1References5
attackerkb
attackerkb
•added 2026/04/02 1:45 p.m.•10 views

CVE-2026-5334

A weakness has been identified in itsourcecode Online Enrollment System 1.0. Impacted is an unknown function of the file /enrollment/index.php?view=edit&id=3 of the component Parameter Handler. This manipulation of the argument deptid causes sql injection. The attack is possible to be carried out...

7.5CVSS6.8AI score0.00584EPSS
SaveExploits1References5Affected Software1
RedhatCVE
RedhatCVE
•added 2026/04/02 10:53 a.m.•15 views

CVE-2026-5255

A vulnerability was detected in code-projects Simple Laundry System 1.0. This affects an unknown part of the file /delstaffinfo.php of the component Parameter Handler. The manipulation of the argument userid results in cross site scripting. The attack may be launched remotely. The exploit is now...

6.1CVSS4.4AI score0.00459EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/04/02 10:53 a.m.•13 views

CVE-2026-5257

A vulnerability has been found in code-projects Simple Laundry System 1.0. This issue affects some unknown processing of the file /delstaffinfo.php of the component Parameter Handler. Such manipulation of the argument userid leads to sql injection. The attack can be executed remotely. The exploit...

9.8CVSS6.9AI score0.00572EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/04/02 10:53 a.m.•12 views

CVE-2026-5256

A flaw has been found in code-projects Simple Laundry System 1.0. This vulnerability affects unknown code of the file /modify.php of the component Parameter Handler. This manipulation of the argument firstName causes sql injection. Remote exploitation of the attack is possible. The exploit has be...

9.8CVSS6.8AI score0.00572EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/04/02 5:04 a.m.•17 views

CVE-2026-5238

A weakness has been identified in itsourcecode Payroll Management System 1.0. Affected by this issue is some unknown functionality of the file /viewemployee.php of the component Parameter Handler. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed...

7.5CVSS6.8AI score0.00411EPSS
SaveExploits0References1
Rows per page
Query Builder