Lucene search
+L

110416 matches found

CNNVD
CNNVD
added 2026/06/01 12:00 a.m.19 views

SourceCodester Pharmacy Sales and Inventory System 代码注入漏洞

SourceCodester Pharmacy Sales and Inventory System is an open-source medication sales and inventory management system developed by SourceCodester. Version 1.0 of the SourceCodester Pharmacy Sales and Inventory System contains a code injection vulnerability. This vulnerability arises from improper...

5.1CVSS4.6AI score0.00199EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2026/06/01 12:00 a.m.21 views

Code-Projects Online Hospital Management System 安全漏洞

Code-Projects Online Hospital Management System is an open-source online hospital management system developed by Code-Projects. Version 1.0 of the Code-Projects Online Hospital Management System contains a security vulnerability. This vulnerability arises from an unknown handling of the 'delid'...

5.1CVSS4.9AI score0.00274EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2026/06/01 12:00 a.m.15 views

Code-Projects Hotel and Tourism Reservation System 授权问题漏洞

Code-Projects Hotel and Tourism Reservation System is an open-source hotel and tourism reservation system developed by Code-Projects. Version 1.0 of the Code-Projects Hotel and Tourism Reservation System has a vulnerability related to authorization issues. This vulnerability stems from incorrect...

7.5CVSS7.3AI score0.00496EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2026/06/01 12:00 a.m.25 views

student_management_system_by_php 代码注入漏洞

studentmanagementsystembyphp is a student information management tool developed by Raisul Islam, based on PHP. studentmanagementsystembyphp has a code injection vulnerability, which stems from incorrect handling of the parameter “Message” by an unknown function in the admissionformcheck.php file...

5.1CVSS4.6AI score0.00199EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/06/01 12:00 a.m.25 views

PT-2026-45624

Name of the Vulnerable Software and Affected Versions JE Photo Gallery version 1.1 Description An SQL injection allows unauthenticated attackers to extract database information by injecting malicious SQL code. Attackers can send GET requests to the 'index.php' endpoint within the 'com...

8.8CVSS6.2AI score0.00341EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/06/01 12:00 a.m.27 views

PT-2026-45400

A weakness has been identified in itsourcecode Online House Rental System 1.0. The impacted element is an unknown function of the file /ajax.php?action=login. Executing a manipulation of the argument Username can lead to sql injection. The attack may be performed from remote. The exploit has been...

7.5CVSS5.6AI score0.00263EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/06/01 12:00 a.m.26 views

PT-2026-45358

SOPlanning is vulnerable to Reflected XSS via the taches parameter. An attacker can craft a malicious URL which, when opened by authenticated victim, results in arbitrary JavaScript execution in the victim’s browser. This issue affects SOPlanning version 1.55 and below...

5.1CVSS6AI score0.00404EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/06/01 12:00 a.m.28 views

PT-2026-45664

A vulnerability was detected in itsourcecode Fees Management System 1.0. The affected element is an unknown function of the file index.php. Performing a manipulation of the argument page results in cross site scripting. The attack may be initiated remotely. The exploit is now public and may be us...

5.3CVSS4.3AI score0.00273EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/06/01 12:00 a.m.26 views

PT-2026-45405

A vulnerability was identified in itsourcecode Content Management System 1.0. This vulnerability affects unknown code of the file /save comment.php. The manipulation of the argument Name leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and...

6.5CVSS5.7AI score0.002EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/06/01 12:00 a.m.31 views

PT-2026-45241

A vulnerability has been found in code-projects Online Hospital Management System 1.0. Affected is an unknown function of the file appointmentdetail.php of the component Appointment Handler. The manipulation of the argument editid leads to sql injection. The attack is possible to be carried out...

6.5CVSS6.4AI score0.002EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/06/01 12:00 a.m.33 views

PT-2026-45395

Name of the Vulnerable Software and Affected Versions itsourcecode Online Blood Bank Management System version 1.0 Description A SQL injection flaw exists in the /admin/viewrequest.php file. Remote attackers can exploit this by manipulating the ID argument, allowing for unauthorized database...

7.5CVSS7.2AI score0.00269EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2026/06/01 12:00 a.m.29 views

PT-2026-45605

A weakness has been identified in code-projects Hotel and Tourism Reservation System 1.0. The affected element is an unknown function of the file tour.php of the component GET Parameter Handler. Executing a manipulation of the argument tour can lead to sql injection. The attack can be launched...

7.5CVSS5.7AI score0.00318EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2026/06/01 12:00 a.m.30 views

itsourcecode Fees Management System SQL注入漏洞

itsourcecode Fees Management System is an open-source charging management system developed by itsourcecode. Version 1.0 of the itsourcecode Fees Management System has a SQL injection vulnerability. This vulnerability arises from incorrect operations with the parameter ID in the unknown portion of...

6.5CVSS6.6AI score0.002EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2026/06/01 12:00 a.m.20 views

SourceCodester Pharmacy Sales and Inventory System 安全漏洞

SourceCodester Pharmacy Sales and Inventory System is an open-source medication sales and inventory management system developed by SourceCodester. Versions of the SourceCodester Pharmacy Sales and Inventory System prior to version 1.0 contained security vulnerabilities. These vulnerabilities were...

5.8CVSS5AI score0.00248EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2026/06/01 12:00 a.m.17 views

SOPlanning 跨站脚本漏洞

SOPlanning is a set of online project management software developed by SOPlanning Company. Versions of SOPlanning 1.55 and earlier had a cross-site scripting vulnerability. This vulnerability stemmed from the taches parameter, which was vulnerable to reflection-type cross-site scripting attacks...

5.1CVSS5.4AI score0.00404EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/06/01 12:00 a.m.37 views

PT-2026-45271

A vulnerability has been found in raisulislamg4 student management system by php up to 310d950e09013d5133c6b9210aff9444382d16d1. The affected element is an unknown function of the file add user check.php of the component User Creation Handler. The manipulation of the argument role leads to sql...

7.5CVSS6.7AI score0.00263EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/06/01 12:00 a.m.43 views

PT-2026-45396

A security flaw has been discovered in itsourcecode Online Blood Bank Management System 1.0. The affected element is an unknown function of the file /admin/campsdetails.php. Performing a manipulation of the argument hospital results in sql injection. The attack is possible to be carried out...

7.5CVSS6.9AI score0.00263EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/06/01 12:00 a.m.39 views

PT-2026-45427

A vulnerability was identified in itsourcecode Content Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/edit topic.php. Such manipulation of the argument topic id leads to sql injection. The attack may be launched remotely. The exploit is publicly...

6.5CVSS5.8AI score0.00204EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/06/01 12:00 a.m.49 views

PT-2026-45422

A vulnerability was detected in CodeAstro Online Job Portal 1.0. The impacted element is an unknown function of the file /admin/jobs-admins/delete-jobs.php. Performing a manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The exploit is now...

7.5CVSS5.7AI score0.00263EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2026/06/01 12:00 a.m.23 views

itsourcecode Online House Rental System SQL注入漏洞

itsourcecode Online House Rental System is an open-source online housing rental system developed by itsourcecode. Version 1.0 of the itsourcecode Online House Rental System has a SQL injection vulnerability. This vulnerability arises from improper handling of parameter IDs in the...

7.5CVSS7.5AI score0.00263EPSS
SaveExploits0References6
Rows per page
Query Builder